{ "Event": { "published": true, "date": "2024-11-18", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-11-18", "timestamp": 1731974592, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "8d5eba09-a044-4b66-909d-726ab0b87dca", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731888007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888007, "uuid": "7bbea3e7-a9b7-4018-b16f-0295dfc3d473", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888007, "uuid": "4cbe533a-c770-438d-8170-aa999266712a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888007, "uuid": "cbf6ba79-8ad0-411e-8020-e133b9dc812f", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888007, "uuid": "54844fbe-04c3-4dab-8d0f-982abadc5f3c", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731888007, "uuid": "1974ab0e-64c1-4ca7-bd33-4c536a3dadd8", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "375ff7fa-a542-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731888928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888928, "uuid": "4553fc68-8591-467d-bb6e-10bedee84960", "comment": "Malware payload (Mirai)", "value": "dbbb593bd722a5684bace7070327de4c", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888928, "uuid": "75d42898-7251-4314-b469-cd4186c8e5bb", "comment": "Malware payload (Mirai)", "value": "79ca474537d60b84d419274852ee91611e6fb209f78a721ccd3319eef13ff182", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888928, "uuid": "132aca53-285e-461f-a7ce-6e71d7e78f5a", "value": "T1D2630281459CA7908E30DC717AA8980B94295DBCB1BF04A2119D4EC66D8FAC3E7F9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888928, "uuid": "0093f761-035e-4b68-8c9a-295cad52c4fd", "value": "1536:p9Qj3ey9+Tei90eQ8nHSAnLd4iHXtTE8qe0BUFTAC:p9M3ey9MeiHDHSALd9HXSfHBUFTAC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731888928, "uuid": "eb76267e-18b4-42d7-a6ba-763c6998394c", "value": 69768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888928, "uuid": "0b41d1cb-e328-48ba-8ae0-fe148a593078", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1731888966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888966, "uuid": "66908ab3-1a10-48f2-9dbf-f1eab528fced", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888966, "uuid": "c9a967d5-d197-4a30-b4c1-36aa2c637bd5", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888966, "uuid": "b37c3351-d546-4458-9ce6-22717f7821bd", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888966, "uuid": "dea5beb5-03a5-4274-b424-f36a515a107a", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731888966, "uuid": "7bb26707-3e95-47c3-b0ee-45e8082aa3b7", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731889146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889146, "uuid": "26a536bb-e2b9-4005-a040-b4f16e583245", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889146, "uuid": "fe4eb209-cca7-4baf-9553-0b838b747a70", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889146, "uuid": "1268efe6-6420-4e5b-9165-3b4012acfcc3", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889146, "uuid": "15b2e794-d30b-4326-a433-d841fdb348dd", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731889146, "uuid": "94813fbf-a122-43a2-8e17-a93c1cce507c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1731889209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889209, "uuid": "2a229f79-7ef0-4e50-85f1-b3dcdf02ccd4", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889209, "uuid": "bd422777-837e-46c0-8386-dbe0dce45760", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889209, "uuid": "cbee9507-eb99-4389-8ea9-a7bdf882b397", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889209, "uuid": "393c4706-6968-4963-9164-fce894988bc9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731889209, "uuid": "f4dbfe8d-ce42-4d17-baac-25f3ae0d62b7", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1731889446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889446, "uuid": "c59a9f5d-ed31-4d04-b69c-d11bfd9c069c", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889446, "uuid": "0355a0d3-4d2a-45d4-81a7-6fbef2a284e0", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889446, "uuid": "83534d63-14fa-4da2-bc6c-4b9c8da7ef4b", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889446, "uuid": "6bbe4a2a-cbe0-4e31-964d-55e5d3064c60", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731889446, "uuid": "6bdd5be9-1dc7-44c8-9d58-3304c1178997", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a23b4071-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731889966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889966, "uuid": "af15c3cc-7d71-4c18-9417-e3c0bac5e067", "comment": "Malware payload (Mirai)", "value": "3c2b697cadede882e449f8882e457b49", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889966, "uuid": "a4131f2b-9c67-4b66-963c-b40dde93f667", "comment": "Malware payload (Mirai)", "value": "237416dcdc901236b1a6fc2f553a6e3b12453bbcf0d243639e14ebfe07d13b74", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889966, "uuid": "c93f6d21-18ac-4c81-9193-679e235f3d58", "value": "T1352222C9224422214CB1CE4E76A92898E5143D818CD94D399DEC2C9EF48DFBB75C7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889966, "uuid": "18497908-c0df-49cd-b7de-588d452892a8", "value": "192:avXvfvovVvBv0wjMdthq3/jkqfs4thq3/s+ovXvfvovVvBvS:1jMdthq3/jkqfs4thq3/T+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731889966, "uuid": "a2e3d764-269d-4c15-b29d-e0bc29613304", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889966, "uuid": "5148f158-048f-47f2-8d9c-692afb3a777b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1731891426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891426, "uuid": "541ed690-034d-4d49-af0c-41f943dd37d1", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891426, "uuid": "b4294481-e0f5-4c99-8d7a-ac1dd2f05bb8", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891426, "uuid": "4c42aa82-74f9-40ec-ae2e-06c713f99aec", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891426, "uuid": "e0090878-0447-43d4-82ac-fc79d79babd9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731891426, "uuid": "b5e3438b-479c-45f4-87eb-f067ab15cdbb", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891426, "uuid": "195aaee5-7164-4710-afa1-b4339534f417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53f06a62-a550-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1731894989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894989, "uuid": "36440b8a-e28e-469c-b8d1-4d3f760860b5", "comment": "Malware payload (Socks5Systemz)", "value": "9d6c76bf43f32a50d7420936ac4a17d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894989, "uuid": "63bcb104-53c9-4976-a640-9f7d75ad5d69", "comment": "Malware payload (Socks5Systemz)", "value": "3bde0b817bbe26e7ec466c1a63211a2d218da842a62496b0413644786bb29ab3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894989, "uuid": "232c301e-1db4-44ef-bac4-922ff9feab5a", "value": "T11C563336DD166060C0B5ABF8E55AE2C9666B2E071B307741BDBBCD4B37073B4985A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894989, "uuid": "d2aaf698-156e-4d4b-b205-742fab8ac7f2", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894989, "uuid": "a812928b-6dee-4860-823d-3c54691dbcd2", "value": "98304:NsXoTrtqJNtvwqA7yDkl/WXtWizKj3Al/s+dU18y5j0YM6R1NgTj8+VRsgmLNY4D:YoHtqDqqA7yi/WXPzK7sxdU18y5j0B4t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731894989, "uuid": "ea213b30-f520-477f-bfea-7293f00f0807", "value": 6127695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894989, "uuid": "be28d370-ecb6-4c41-9269-f844e8e8c7be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23b7cdff-a551-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731895338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895338, "uuid": "e8059ee9-ac43-4c84-80d9-83e0c61a7536", "comment": "Malware payload", "value": "f69864381ad8424cb73637fe5affe5a6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895338, "uuid": "8ae82d96-4271-4077-a457-13a17de09c57", "comment": "Malware payload", "value": "be6994ae0b45ca0916596925851ceb7a96b233a81a6d8014e2dbaadbf29f19fd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895338, "uuid": "16de84d0-a569-46fc-b9aa-51f753898281", "value": "T18322F0C93360A9F08990DD5D38B6C88AF23855CDAD8EF761C748181DC074E4A7F2AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895338, "uuid": "217262c9-28cf-405e-b884-c0628eeea3f8", "value": "192:m8Efs0qLv+7tVuv7ckmSXDPxxVNdXDoP5PZPONZq7lNu7Pbsamv7s03maJ8Ezs0A:a2vQRxONZq2SYWRxONZ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731895338, "uuid": "708df58a-5f91-4db8-b218-53405a96ff0e", "value": 10662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895338, "uuid": "e9955050-5257-4526-9e25-3d58bcae90b0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5f83f3d-a552-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731896120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896120, "uuid": "01803982-44b9-4d0c-8ce2-180d4d55d394", "comment": "Malware payload (RedLineStealer)", "value": "337bcd49eb10ad40d5018ec8c7494ebe", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896120, "uuid": "c2bc8399-90ad-46bc-a19d-e47a8fa097df", "comment": "Malware payload (RedLineStealer)", "value": "51274edd5b802492c53eb9cf0ede945d4ed92294c161fde49640b87fecf99a38", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896120, "uuid": "e7313fbf-e377-443a-b64c-34f51fa0e22d", "value": "T1D2763340BBF55124E6366B310CE6D2C70F38BCA99A384947795E2C1D29B17E4F2BE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896120, "uuid": "fe3360a2-f268-4a10-ab0b-520b0e443d19", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896120, "uuid": "a12fba5f-cc27-4afc-a139-b0d8787a29ab", "value": "196608:UsqzAoW+sVpIX991ocOydbaUq1eyaC0D:MtsVM7uRyduUqhWD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731896120, "uuid": "50bb6d2e-1d5a-40ea-8d51-ed4be003142e", "value": 7408640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896120, "uuid": "d7d790ab-70fd-4e8d-9180-ab9e24b893cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731896167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896167, "uuid": "ca0b80fc-c3f0-41b0-bfde-1429185752a1", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896167, "uuid": "54d28403-cf4f-401a-9e84-d8f78bd0638e", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896167, "uuid": "fd74bf07-d99c-405e-81f6-217d7ce254a1", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896167, "uuid": "968cd497-ad37-46ca-87d1-b0e8e25cb238", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731896167, "uuid": "04e17604-0aef-4bd5-a7d5-5eddd6b0f201", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "615185be-a553-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731896300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896300, "uuid": "8ec18cc5-31b5-486d-b406-909a5e42672c", "comment": "Malware payload (Mirai)", "value": "1101924f02581f85873e5c3539a0a6b3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896300, "uuid": "8fec947e-367e-45dc-a29f-a0fb3a935e97", "comment": "Malware payload (Mirai)", "value": "dbc38031606afb3b1247474afc9b565ada02bd9546cfffcecbc08c1288807201", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896300, "uuid": "52093e51-c8a2-44d7-810b-83c97031fd2e", "value": "T1B022EEC913C86DB089949D6D7A76CCC1F2185FEAED82D551CF48289AC246EC87D32B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896300, "uuid": "1da6fa10-d9c2-4780-ba85-7d1b298bb704", "value": "96:iSR9vovDTErw7Qwk3wNkU0ONZqH2VycCwclB9TovDTErw/EGQwk3wNlnaU0ONZMv:V9vDINkU0ONZqH22vaNMU0ONZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731896300, "uuid": "d70d886b-41e0-41c0-bc0b-5d54b4e533a4", "value": 10746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896300, "uuid": "0dc12158-6476-4a6a-b28c-92c71be2c070", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671f349a-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731896514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896514, "uuid": "b4fba5f5-dc83-46eb-a5f4-a9d72c47362c", "comment": "Malware payload", "value": "39fa27140ad0b56af87e14e72fbe4d27", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896514, "uuid": "5305386b-64ae-410a-bfa6-14dd540d8611", "comment": "Malware payload", "value": "5b3f9c9e26876697556bcc050da24c6324df923f8b996e3148576464a77ea7dd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896514, "uuid": "5fde10cc-74ce-4687-980e-ccdcb8e252aa", "value": "034301D01B75278C5371D8753DED305F8634292E72A63D102DEB818EF81A62398B6EBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896514, "uuid": "1779c045-c826-4366-bf85-3e89e4ebb579", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvc9:8D+CAXFYQChaAUk5ljnQJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731896514, "uuid": "32af634e-13b7-4080-bfc7-4d4ca17979ea", "value": 59860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01853654-a555-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731896998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896998, "uuid": "085c235a-a5f4-4cef-89cc-fa4d19cb5548", "comment": "Malware payload (Amadey)", "value": "9219b0d1dd0e33ca434ffd0db8b3bdbe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896998, "uuid": "8e5d52b2-518e-46bf-840a-6688e52a8c99", "comment": "Malware payload (Amadey)", "value": "408570855f8686662dd74ca774155ba23ce0d0d912344b4a3df0dcf49759bf4a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896998, "uuid": "7ca59b5b-6a06-41a1-9b1f-d4528ee9de2b", "value": "T10A85331302F54E56FC49BAB7C217C93A34B5291C16E97C04EFB869169FFA7D8832E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896998, "uuid": "c3b3c534-2114-4b9a-8b6a-4f4707454cc6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896998, "uuid": "f21eeebe-d895-4148-a84a-661828236ad5", "value": "49152:UOnze/GCK6Kq/x82KumsTNEotIvahhl1NXuWRuWFRI:Rnq/G0KU84EgIiDj4WF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731896998, "uuid": "47562f29-c6c9-4f5a-8690-bae814d814c3", "value": 1869824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896998, "uuid": "67a84394-94c0-4ab4-9206-91734a476244", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "779ffffa-a556-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731897626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897626, "uuid": "5f8b4270-08dd-43be-b378-91ecd3d91940", "comment": "Malware payload (Healer)", "value": "a93345c6bc731fd47516e16dbe7700e5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897626, "uuid": "5e9a1a71-9ff5-4519-9ef5-c878b7e97182", "comment": "Malware payload (Healer)", "value": "24d9ce8310c3eb716a874406d624659a7ffb4e4fdf7f51140084a633831e94b0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897626, "uuid": "8b9d1be8-ce55-46d6-92ae-c294debe34fd", "value": "T13DD53BA2B509B1CBD84A37795567DDC26D5D13F90B2109D3A86C74BAFE63CC012BAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897626, "uuid": "4f12fa16-ea8e-4737-bb82-37f4fb84a75a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897626, "uuid": "ab4741e1-cf04-4a59-9774-ecb1f38fa89f", "value": "49152:HTUfJ+UuMF7vOrbwJfl0Lx0aR+NXG9K0qNYZ:HTUfJ+UuMFqrbMfl0qaRlkdyZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731897626, "uuid": "c2c7e48b-4ef6-4747-90b2-f456c9eadf5c", "value": 2790912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897626, "uuid": "e7f53dc3-0056-4115-94bf-fca4b5c2c8c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03a8b734-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731898147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898147, "uuid": "cd9269d3-d8c8-4251-9950-ec1de74ed759", "comment": "Malware payload", "value": "f57fb0feafebe84525278fe2d083cdcb", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898147, "uuid": "8e335fbb-3981-4c6b-9fa1-a318484ac793", "comment": "Malware payload", "value": "ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898147, "uuid": "45259bf6-4636-4f31-8616-626115d9ade3", "value": "88C313CFB6313756CB5069AA41D683EA2B7E3CC09D318F190ED16F965374A5363CB480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898147, "uuid": "6f28caf4-f17b-45e0-a7a7-6fb92b251963", "value": "3072:cGgdcsaktkt9SqRD4jEFwVIG+meNqZsMdynPsi:5FmtQ9SoOGXRmegWl0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731898147, "uuid": "2339d646-6b32-4a22-993e-85c7fbad9e32", "value": 123784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d65a53-a55e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731901173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901173, "uuid": "b4aca34b-1b4f-46e8-b29e-2ef9bd5492bc", "comment": "Malware payload (Stealc)", "value": "cac804be5a8c3370120fbdc37e4c6ec7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901173, "uuid": "f81c7ae7-9e72-4169-83b8-f2a80a369825", "comment": "Malware payload (Stealc)", "value": "dd19c480ab45acf19038eed898ed4e0c39eec6d9f9a1252f06a740da920711bc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901173, "uuid": "45935d9d-d5a8-46db-b0fc-39a04d4f75b8", "value": "T1C08533001C3B2973C68AF7FF5B5F735E6525D98A11C22F7BE446E6B50C1B086BA4C9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901173, "uuid": "ea8b4964-8770-47a0-a1a1-f4d1d6a85836", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901173, "uuid": "c2b3dc47-eaef-4efb-bbb7-b526d247cc15", "value": "49152:klLNjPFw5g32sE5n4ajOJTbTBwklPefKe/yH00/k:MLND0PQaQbTBwUPeye/yUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731901173, "uuid": "5902aafb-2eab-40e2-91fd-7a539ee36016", "value": 1828352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901173, "uuid": "a819f5f0-563e-4d36-9ec7-114c8e1fa01a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75f1a182-a55f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731901489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901489, "uuid": "5ade4870-8677-4d7c-87b0-c0a34d43cc68", "comment": "Malware payload", "value": "4b4b1a19f9c2b9a32502f7b9b975b9a1", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901489, "uuid": "7fd78056-3641-4ca5-98c5-f93710b180cf", "comment": "Malware payload", "value": "86e19464cdd51fc94bf54e15a200dbc11e17c98d5bb5b8ac2fe3d74327266ce6", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901489, "uuid": "ba118a52-5a68-4b3d-b487-cc394c1feb6a", "value": "T1DA37BB8D0EB65EF8E225E40723616BA6E44D241FEF453B98F64D71AC9F04085FF9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901489, "uuid": "a0c1e263-b487-4210-8bf3-cfc0af5db466", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHY:Nu/MEdS9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731901489, "uuid": "053f68c8-09d5-4eca-92eb-f28117cfd35d", "value": 22752839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901489, "uuid": "1dd7e4af-8c1d-4c69-a57a-03008f115f13", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec167530-a560-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731902116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902116, "uuid": "f112e887-817c-4c02-a2b8-ae09ea3f2926", "comment": "Malware payload", "value": "81cd1fab69648f74265e6106d799ce00", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902116, "uuid": "d15f42c6-f5e2-4bfc-b8da-9cea0fc0b569", "comment": "Malware payload", "value": "9495ab7eb3e9438137523c334c17bbfb477bc342a32e3150c4e6a5d6d156d573", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902116, "uuid": "965f2567-df8f-4e57-a525-a85d2b39273a", "value": "T1A224D0AC183026C7B599B72D09832ADD90431BF463A9BF5B744EC44F5E8C8E5A7B06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902116, "uuid": "b793f511-0380-4ccf-9e99-588721358fa3", "value": "6144:wXkEwOB/eq1TTdC7piDRXfhKUFN4BBJJhsDvBALgk:wUXGfdy4D1MU74RsTBALgk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731902116, "uuid": "1561fe8d-ed6d-4e96-ab2a-2f65148cc951", "value": 213061, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902116, "uuid": "3f30acbc-c535-4557-95f3-4b2ae8f3387c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be1cf28a-a561-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731902469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902469, "uuid": "011c94c7-d945-4861-862f-d110982443fc", "comment": "Malware payload (LummaStealer)", "value": "35ac830ad12275b6f728bf488be64177", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902469, "uuid": "989324e1-1f14-44fc-be69-60c329b58996", "comment": "Malware payload (LummaStealer)", "value": "3c323dacc7a0b9e69acfcd23a9b2266e3803600de184f5684541223f2f0ac85b", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902469, "uuid": "962724a9-e782-4854-bc96-d6d193bfc1d0", "value": "T17BB4D09D715072EFC86BD472DEA82DA8FA502477831F5613A42306EDAA4D897CF184", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902469, "uuid": "45aed8ce-dc02-4988-8365-b4d7e90f4aa4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902469, "uuid": "6ede0b9e-ad4a-4a82-b546-917320e409e3", "value": "12288:PqpVS4VidmlvARnu96usbq2Lwzeupc1+aaB6e386Lx+Xvcjk:Pq+SidvubnJzeupc1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731902469, "uuid": "1045c4a1-4e22-499b-b391-9819287637a3", "value": 534528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902469, "uuid": "0c053e39-1d02-4743-b382-798cbc009782", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57b90dec-a562-11ef-afe5-82aee05be84a", "comment": "Malware payload (CryptBot)", "timestamp": 1731902726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902726, "uuid": "23ebe7b9-80a1-4523-9e90-ed639d8570a0", "comment": "Malware payload (CryptBot)", "value": "a84fd4e0289966a213cc12d90e98938e", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902726, "uuid": "5b721ba3-bf14-4272-8393-ab1e3bf8c437", "comment": "Malware payload (CryptBot)", "value": "03186163270deda153db2cfed3005d415c6059326b0a86439ac6b043a5a5346e", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902726, "uuid": "7d1c4661-17f2-47da-a407-51b9ee8d0bae", "value": "T1632633F14C734AC0E1DA74BDE19096A380692C492C2E92BC6C6741FD98D61BEE76DC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902726, "uuid": "16320d04-6cea-4ba2-a33e-a3470e3ab6ae", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902726, "uuid": "a9b977d3-b0f3-4ee3-bdfe-13c4c4e681b8", "value": "98304:OiIjWXwHxQ8EsLU8JIJHjUDCPRPdQB51YhpGCUkvzz07u1Y+us:wWXzsoeIJDZPRPdQB51knUY0i1ks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731902726, "uuid": "09c59dc2-5e1e-4126-9ed5-48678ad46106", "value": 4426240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902726, "uuid": "5859f21d-14c9-4d10-b807-9f5505dab695", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d3c4e8b-a565-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731903944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903944, "uuid": "d04c18df-c921-4aec-a24c-28d7066f87c4", "comment": "Malware payload", "value": "22dc8ab553bb65d8b91d14b1131cf11e", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903944, "uuid": "adeb2774-25b5-4c65-a4c5-75c5bfd6ff72", "comment": "Malware payload", "value": "5a8533ad46bb51aabba645be07473b3740fa1779caad1fcfb268961d0a1adc4f", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903944, "uuid": "30ec2e3c-b885-473d-9238-1f6a9e20fad6", "value": "T18634F0A793F0B14F7FC647B39A318B086609F069645C7A9CF560ECEB53A3F518A164", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903944, "uuid": "4aea8c23-f108-4084-a344-0e080cd2ef97", "value": "6144:2jmT5IJWIMfuH9QfM377JKzTRlEL9d7813wCGVqf:2iT2J9FyfoJWEBd7XCxf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731903944, "uuid": "9cbce2e4-52f6-402b-b417-2cda221b6bcf", "value": 239677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903944, "uuid": "6b13f032-c33f-4fee-8628-edd415d9239f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc8a210a-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731904721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904721, "uuid": "26ef28e7-de94-414a-8004-40cfec880184", "comment": "Malware payload (Healer)", "value": "bb8a6bf17f4508b049fa89d6e9c32901", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904721, "uuid": "293304dc-357e-4dff-b043-5ac2e93cf053", "comment": "Malware payload (Healer)", "value": "20d0fda98664988be3ff79e706af18c213c447e460923250392820a2a63a3b5e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904721, "uuid": "ac25cd53-bd54-4dee-91b7-49f423c42319", "value": "T1B3D55CD1B40572CFD89E6778942BCD82996D0BB9472048D3BD2CB4BA7E63CD127B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904721, "uuid": "22bb12d3-fb1e-44a8-b2c2-9fdc483c9577", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904721, "uuid": "b0874f00-0458-4d5b-abee-9a7bc0036b6c", "value": "49152:ZMxU/M/kM6ZflIHVM7RoVciiz0SPmv9zo3VZcf2PIBu:OxU0/kM6ZfSHVM7aXiwSzq2PI8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731904721, "uuid": "3a95fc77-b52e-4b41-bb2d-3a6fb1b1fc2c", "value": 2862592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904721, "uuid": "e66fd178-30da-41b7-bfd5-ac354159ac93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b0b6e04-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731905416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905416, "uuid": "38e2fc15-3c29-4f4c-bc31-c64e8a1de48b", "comment": "Malware payload", "value": "809c9f309afb4b962378b297d477c93d", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905416, "uuid": "378a1043-e0aa-4c5b-874a-854c84e385cc", "comment": "Malware payload", "value": "812d88ae98ca4feb60ee05ec58d77b8610883a1b7931096c0e90b0f3ddab08a1", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905416, "uuid": "8443dc1b-2f50-4e6b-9fe1-ced9d5dd9cc8", "value": "T17E34BD9BB3BC39D3901108FCD464D7F9588E0692297A54B42C9ED7D248F40FAB6C4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905416, "uuid": "51d5e7bd-e69f-4b88-9dae-ac5b3732a2ec", "value": "6144:qxk5WBYk7lyBrBYf8wQ3scsVJ5OLik5pGLQce32bpv:gGSYIkra8wysb5OLik5YM2N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731905416, "uuid": "d6cad6d0-0c5a-47dc-b565-45c74f428755", "value": 239693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905416, "uuid": "144aa94c-db0c-454f-9df0-48fb2c34dd18", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731905751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905751, "uuid": "d39710b5-03ad-4eff-96a4-e5b369f205c8", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905751, "uuid": "c4aa418d-400d-4d4f-b335-8efc2c90b0d5", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905751, "uuid": "09b648c9-dabe-4046-97a3-6947483f9cc9", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905751, "uuid": "27bc7197-8251-4d37-8055-f3bc22b7b5fe", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731905751, "uuid": "3d1b5827-6bcc-49ca-ab70-7478d3b6ef97", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a2e5835-a569-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731906169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906169, "uuid": "10fc84c7-a609-4fda-97e5-e7590bcbbac5", "comment": "Malware payload (CredentialFlusher)", "value": "0c9c337e939b1ed67d875c4910675d23", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906169, "uuid": "7ab3aa6b-d11b-4873-ab96-baca86d8c2da", "comment": "Malware payload (CredentialFlusher)", "value": "ff7f7f05e8337d9d9b0bd85191257441dcc8ff62275fda513a36641973568a1c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906169, "uuid": "1f91cd0a-f3e2-4397-9cc3-6431296a0b4c", "value": "T147159E0273D1C062FF9B92334B5AF6515BBC69260123E62F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906169, "uuid": "28580c9a-e3b4-42c3-b868-1a363ab59c09", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906169, "uuid": "fcb73f06-07f0-4bd4-bc98-f9704048a733", "value": "12288:EqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgahTRf:EqDEvCTbMWu7rQYlBQcBiT6rprG8a1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731906169, "uuid": "6ba10f80-9f52-4d81-8df7-872170ded600", "value": 922624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906169, "uuid": "5c30a408-ae9a-462a-bd46-1dffddc57984", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731907698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907698, "uuid": "aa53a7bf-c58b-4549-8fa5-7da0931ff802", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907698, "uuid": "f3559b87-ddc1-46b1-a6e2-792c21a668f1", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731907698, "uuid": "2a3f9854-0b5e-469e-aba6-57f653da0132", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731907698, "uuid": "e840c58c-1a04-4c2a-9bfb-9ec052f936f5", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731907698, "uuid": "73339e99-b57f-4e7a-8aa5-3794fdc09c31", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f9b73a7-a571-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731909155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909155, "uuid": "395a5579-b014-43f0-8d3b-2d3e82535c0b", "comment": "Malware payload (Amadey)", "value": "07b2736cccd049a1044ef23450b7cea8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909155, "uuid": "f05f311b-4290-42f0-a393-4f205284eab9", "comment": "Malware payload (Amadey)", "value": "d65f8df107f1bccaf0feae1d188dc1f7ca824c8cfe1eb445776e509bf8ad844a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909155, "uuid": "0ad65278-760a-4491-a97f-f32160d241cb", "value": "T1409533DB7CB1C09DFF77D3798F1BCBA52D62D20C8A4E0F3540567BA85693B8641298", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909155, "uuid": "88eed56d-c119-4df1-9fa3-221a3e35cbce", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909155, "uuid": "fd9d07b1-4304-4fc0-ae9a-709a0b2b9230", "value": "49152:W15svM++6NGlbVLtxee3SVY/5OUN1DytT:W1O/+6glbVLtxrRpZET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731909155, "uuid": "84b7dd20-8ceb-4336-9c64-1ba9ba36e592", "value": 1898496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909155, "uuid": "2effb091-87b9-4da3-a24a-c930b92b57b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9308760d-a574-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731910557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910557, "uuid": "92023865-14c2-4840-be38-753fe3b06efa", "comment": "Malware payload", "value": "f2a1f5a56a49abed8d0d14248a521443", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910557, "uuid": "eeb3ee09-990a-4591-bf2b-9f9ac19e076b", "comment": "Malware payload", "value": "12ce71b786dda2fa0724456935cf2fb4aff3486250eef2a6aaec18ef3aa24c8d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910557, "uuid": "89a65cf5-5407-4c0b-8727-17eae604d596", "value": "T18837BB8D0EB65EF8E225E40723616BA6E44D241FEF453B98F64D71AC9F04085FF9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910557, "uuid": "e0b8be33-841f-46c9-8029-f307a573c47d", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHH0:Nu/MEdS90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731910557, "uuid": "b9df4850-688b-455d-93dd-dacf6cc935fc", "value": 22760984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910557, "uuid": "c754180b-f159-443e-b80c-1094fdd4408d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "646449d5-a577-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731911767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911767, "uuid": "b426066e-2fc7-4ee8-83a8-7ba27a1a33b1", "comment": "Malware payload (LummaStealer)", "value": "56b5ba0c22514be73f715832d8c2c9c7", "object_relation": "md5", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911767, "uuid": "9a801339-c1cb-4fb3-8acd-e6c25a4354a0", "comment": "Malware payload (LummaStealer)", "value": "b0879918c9bcb34665ea7471f7ce87c6ed49a032f364ccd2ae279886a2bbd96e", "object_relation": "sha256", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911767, "uuid": "92afe903-fbe7-4967-b16e-ac0670ae52a7", "value": "T1F8F09763B2BC2231C1A483AAB68998428B4B2C4F300E12BE1B4D8114BD323F547EB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911767, "uuid": "ed699d15-2209-47ae-824a-f5bb30558799", "value": "12:3Moumg2oK9d+dv2q8qG3MEAhqAnAaGltKMMn0O:3MoumvPGOq838jhNGD+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731911767, "uuid": "43e8ce30-d9a9-4b40-9a9f-f9278f7e710c", "value": 478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911767, "uuid": "bd7be2af-b384-4782-bf53-9bae296545a9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65091ada-a577-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731911768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911768, "uuid": "b754f3e4-eba2-48a6-acd7-d4358933969a", "comment": "Malware payload (LummaStealer)", "value": "2e3bd9f234997a2489194438b013a61b", "object_relation": "md5", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911768, "uuid": "1d72aa49-92aa-4d15-8ed7-fbf6e7b7aab2", "comment": "Malware payload (LummaStealer)", "value": "9ba9c49fcdd2332f0826ec6ba395a46ee33594e3f8b479170133d5bc395094cd", "object_relation": "sha256", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911768, "uuid": "0721f907-bbec-49e0-99fd-6a411a5dc560", "value": "T173251255E7C297277001B638ADC430171BA7C9F22237CD4EB19AFA4BC217B705E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911768, "uuid": "073c1624-9806-4979-beef-f4fce65a4db8", "value": "24576:UoO4TYojSp32w2XLSgPac2p/ylcRfs9gJ4XfoKCDdd:UoO4TEp3dWLVwp6lcRUiJ4gKCf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731911768, "uuid": "d6f4f5f0-39d6-4551-b8af-7081159ee559", "value": 1022516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911768, "uuid": "ec6b7408-5efc-41d6-b9c0-8d6739fba468", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37c1e8a0-a578-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731912139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912139, "uuid": "ffd9d327-a440-4f41-b3dd-222d379f8ea0", "comment": "Malware payload (Stealc)", "value": "a66e3a8cd38ef8cde7b1c88a59716503", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912139, "uuid": "54bc5034-7144-4aaa-adec-8af316134955", "comment": "Malware payload (Stealc)", "value": "3d8604104915eb32273b99186f799f3a2e971c6b93e7f76365e8804ffb9ccc01", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912139, "uuid": "ae41ed4b-1b97-472a-a6c0-5f6c202c6a08", "value": "T1588533590A22F867DADCE07A1CACBF5D2305C76D24CE9BF21304242DC7E75B2AD6D1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912139, "uuid": "275f7b9e-c028-41b8-b425-751452d05f2e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912139, "uuid": "7a1249a0-11a5-4323-be8d-ddba2a87d9be", "value": "49152:1+xcoEwuoOTsL2DWclNI96ew2VLy7LNG7:171wrVLCplNOVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731912139, "uuid": "e337fdd3-0e13-4e28-ab6d-28ffcc67d548", "value": 1741312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912139, "uuid": "bfb17596-d001-45f1-88cf-ddc49ad457b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "848d1e41-a578-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731912251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912251, "uuid": "b815cfe3-cf13-4e6c-95be-ad367df6c22e", "comment": "Malware payload (Mirai)", "value": "954d40a39c477772112b2007d431f38e", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912251, "uuid": "55f8b06b-d451-498a-9199-4da7a12ab27e", "comment": "Malware payload (Mirai)", "value": "75513804c727d6d056248de5b1cf4f0d2beadaf8ba60f390a10f65a8de35a343", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912251, "uuid": "0b554cc8-32ee-4a70-8d4b-26fddcb63990", "value": "T16664F1D7AB11BD76F4958174BA6B034CB3708BC9C3C3B241B354C5293C6D3869BAA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912251, "uuid": "e3b6d965-6359-41a2-88ed-40c60ac76439", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtopwPa5POdOQ33Q:2IIKXhZtL7jOTyIG87XGfPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731912251, "uuid": "5e9617fc-5297-4de0-aa9f-0c463241fa76", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912251, "uuid": "0860cdbe-806d-4179-bce1-6c3a5b4299ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed56dab7-a57a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1731913285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913285, "uuid": "00bb1e26-e8a6-42cd-9542-98461cd9bfd7", "comment": "Malware payload (Blackmoon)", "value": "622ce60cc829804f71b2f42613b3efac", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913285, "uuid": "5e9e88f3-1035-4b5d-ad51-e0b15624008c", "comment": "Malware payload (Blackmoon)", "value": "116129135ce162c399a0a5cf85e5712c528067cdde232562e6f9c30ab2d7eb9d", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913285, "uuid": "5411e559-bd40-4ad6-96dd-85f8b580d632", "value": "T182E4231AC7868E7AC9E3387BE72AECB3291DFD1E86544C1EF48169BBD930391C4524", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913285, "uuid": "f6a34e1f-c38d-41e8-abc1-8eb2e27e8b74", "value": "3c06e82d82dae13ecf3234b7d4d4a883", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913285, "uuid": "90a8cbba-b668-4ae3-a33f-2f9d337e661a", "value": "12288:gvMpjVOZA5O41V5bNmeUcOy341zZFHkaNOx9KhkumFSKCDTcGzfDYx9SmG0OCK1u:QMBUmOe5bYcfaNOTUvmFSfT1zbYx9rGq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731913285, "uuid": "00bfa304-5691-4e6d-8ecf-154c975cccea", "value": 668672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913285, "uuid": "ca0ef2e4-9cb6-408f-b054-3a84bb036dd0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd3b85e1-a57c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731914064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914064, "uuid": "8a5ba510-a9a6-4e7b-bd8f-b94901e29fcf", "comment": "Malware payload", "value": "9913dde865b78cca4519cc3a159de7e3", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914064, "uuid": "bfce4f9c-5676-459a-b889-6f06c5b6e4b1", "comment": "Malware payload", "value": "080f25126da3d599144dd131018183062e5e21188543b6aea2b59dfb1201001e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914064, "uuid": "c35cab1f-3cb4-470d-b907-0bb0efe95b27", "value": "T1F234F09DF890EAD66CC872E3BA7051C40214A88E0D93100EBA6778CF67F1D96457ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914064, "uuid": "a95cd24a-76a0-4856-b8ac-35a540de95a7", "value": "6144:FfqvrJ1Nl8kzlaIyqAwVO1kG6oPwzWnKg1i0GhUuYm:FijJukzlvy/SG0/R0G2M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731914064, "uuid": "11de054d-8f2e-437e-8771-339eed7be7ed", "value": 247877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914064, "uuid": "373cfc36-8c1c-46c4-b6c7-49c16f9d16bc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fe0d1de-a57d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731914256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914256, "uuid": "ea68fdd6-02f5-4170-bc15-b85c10b43e45", "comment": "Malware payload", "value": "f1cf60140242a985d62e2a2dae85462c", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914256, "uuid": "caada0ae-9820-4e30-86bc-1e5dcbe2c679", "comment": "Malware payload", "value": "5a8434fc00612a7f8b23a22916164a1a8dc2fb6dfe1e062a128076627bca7534", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914256, "uuid": "db7a439b-1cd5-40a9-abf7-373caa0cf608", "value": "T1BE24E0232F939A4D8BE7C35A3BF24C3C0A5591162F4D070D436A657883B6E3DEE8B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914256, "uuid": "b69ee442-f0f9-4568-839a-63adf2acc1c9", "value": "6144:0h6zHWSxJzmKwwj4ls0C1i/3CLqUy+gby0JZkXe:JWSbSKwiHcfCKbtCu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731914256, "uuid": "38d01f11-89f4-42b2-90b4-71c15dd6a69c", "value": 211007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914256, "uuid": "b4b96862-2339-47fa-b796-aa51f90185fd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d8c3c8c-a57e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Braodo)", "timestamp": 1731914708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914708, "uuid": "951efd9b-883f-438d-8ed4-6054a18c281c", "comment": "Malware payload (Braodo)", "value": "f48039b1e0738a2f53824626630beb90", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914708, "uuid": "36b4b44f-4feb-495c-99d2-f63173ab5de9", "comment": "Malware payload (Braodo)", "value": "a01da93146fda41dfcace9e84a303dfd59787d0951879c03fccb988275a3fe5c", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914708, "uuid": "44b3c5f7-83c6-42fc-aff4-36987c8f9103", "value": "T142E2DF1CD95BB998E8420DBFE00902EDF5258542A6417F292582FF8FB7807DB4B072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914708, "uuid": "3000459b-305a-45f1-901e-2fe8ec23cd87", "value": "768:+BJ3hHepITJJxyqG4XC3wGtZhco09NxllNzXcPyR5soHpY9:yR3hXEZhGB9MP+c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731914708, "uuid": "f01e5c20-ab20-4bb6-9d30-937b88fa53e0", "value": 33698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914708, "uuid": "bf3a59aa-4291-4b39-8d01-dad9eb533b7f", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e94cc2-a57e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731914741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914741, "uuid": "65082273-4c08-4a9e-846b-18f26eea54f0", "comment": "Malware payload", "value": "1d97414326053de55bbd1bea666bd145", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914741, "uuid": "5e773021-4669-4f8e-99d2-81d8a1e9c228", "comment": "Malware payload", "value": "d5262f870bd730e178f3431205c15d43f3c2acbd0546b5d8788ddec53b8b14d1", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914741, "uuid": "65a94d80-6984-4012-9c56-dd8288ddc935", "value": "T15DE72356E24B0372D64F7F3A668A0233E658FD5C7232628F3F9823511ED26D60B5BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914741, "uuid": "e60a9ca9-bd85-4f6a-8e49-f2ba27f61387", "value": "1572864:T20csalWaQNbExc9vRC6Ny/sWB5rsLfIxrsRf:6galmJrnUnB5rsLfIruf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731914741, "uuid": "d64028a0-7230-42ca-b6ed-a1e2b5a8e4a1", "value": 68971076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914741, "uuid": "d1b1a302-b7a2-4685-8e18-b7618ba35d79", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5697be21-a57e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731914750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914750, "uuid": "1af8bbeb-b50a-4b9a-a0c3-06fd2b09bdfd", "comment": "Malware payload", "value": "a05f97210e2ab782129b99ac5d4933fe", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914750, "uuid": "6521276e-cca9-4d35-84e8-4a6c722623ee", "comment": "Malware payload", "value": "6fcc8209db2045d2d6daacef8e263ee79272802f4acaf0ec6fdca9f6b18a1c0d", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914750, "uuid": "5f86f012-8949-4e23-a678-827121e3608d", "value": "T1A5E72356E24B0372D64F7F3A668A0233E658FD5C7232628F3F9823511ED26D60B5BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914750, "uuid": "d51e1bb8-74b0-4dee-9e7a-799f22041541", "value": "1572864:M2Qc9alWaQNbExc9vRC6Ny/sWB5rsLfIxrsRH:R9almJrnUnB5rsLfIruH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731914750, "uuid": "68748106-780f-429f-9492-24d63118811c", "value": 68971088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914750, "uuid": "455cff24-760d-4938-809b-0423a8dd7910", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75287053-a57e-11ef-afe5-82aee05be84a", "comment": "Malware payload (StrelaStealer)", "timestamp": 1731914802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914802, "uuid": "4a45f4d7-9241-416e-b79e-10b9fd71a381", "comment": "Malware payload (StrelaStealer)", "value": "815c5e44dc2107e05478d7130ee7ada9", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914802, "uuid": "0dc9cc0a-5a46-40ec-806e-dce838c0c402", "comment": "Malware payload (StrelaStealer)", "value": "d6f6d99846a3ffbb50c48777c858ead0f4fd539b164d7b40482daf17b9171ac9", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914802, "uuid": "f55f61f5-418b-4ce1-9f1d-c53477591202", "value": "T110E72356E24B0372D64F7F3A668A0233E658FD5C7232628F3F9823511ED26D60B5BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914802, "uuid": "9c04b2df-9c8f-4916-b80a-722c6c91681c", "value": "1572864:U2FcCalWaQNbExc9vRC6Ny/sWB5rsLfIxrsRG:ZdalmJrnUnB5rsLfIruG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731914802, "uuid": "ece186ce-9383-424e-8eea-98adb5327f15", "value": 68971084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914802, "uuid": "38ad3027-dfbf-46dd-a019-bcea869566aa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d2f63cd-a584-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731917231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917231, "uuid": "19729751-71bd-4cba-8f52-cffca851255e", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "07ee76a7cb4349049338487d58a82f70", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917231, "uuid": "637ab350-afb7-40d9-a63a-7d1fdb7ceca9", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "8d018e0661c7b5cfa40733a458815b5a9dbe4b40a90f924110aa6d8008872d09", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917231, "uuid": "ef70d5f8-6042-4784-8575-44a3241b878a", "value": "T168C4E10262F17665F7B78E704E7ED2E82A2FB5E35E70926F1114560F08B25E1C962B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917231, "uuid": "977bc842-e83f-4db7-b73e-046a2d1c2293", "value": "532f6b93fb9be17d1168b27796518993", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917231, "uuid": "c6ab5d40-7f9a-4954-8cf8-bf63c54921a9", "value": "12288:OfUqqJeTUIjufcJ4T9tkiSm0qaKHPiAKy1O:XqqetmsKHPiAJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731917231, "uuid": "57f03f0e-3cb9-4c7c-bacb-ad51fc0a440d", "value": 569344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917231, "uuid": "208cf090-9776-4013-840c-9bc1860bb991", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbd57624-a584-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731917497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917497, "uuid": "9b10c9f7-af2a-4d04-9471-d662c4e961aa", "comment": "Malware payload (Mirai)", "value": "c214d9ff1cbfeb4b57f2d0710ffd47e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917497, "uuid": "de7336da-7fce-4d11-95a7-41709a6398c7", "comment": "Malware payload (Mirai)", "value": "b099a0404de3030298b37e5e63428412d570e095613cf081c03c7a7c07fe3e38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917497, "uuid": "37156df4-f673-414a-a463-5079c7b35771", "value": "T108333A85FD805A13C5D4127BFB2E42CD772B13A8D2EB7203D925AF21378796B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917497, "uuid": "eb6d16d4-ce33-4a98-a51d-64d6308b77f5", "value": "768:K5QjjFI8GDgblJZclw4VZf0oCNw+NaogOmFdxMzVlzdxU/QVH9emvUyKmI:+CLlxGfYgXyz/U4umv7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731917497, "uuid": "f236ac57-e37a-49cc-8336-bd9fb6d815a8", "value": 54668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917497, "uuid": "20c39968-cd45-44e1-b55e-1bb73075400d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b31f0b9-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1731917657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917657, "uuid": "ff4aed1d-6f26-416f-b679-7b87ed64ba11", "comment": "Malware payload (Socks5Systemz)", "value": "86dedfce84822ee057db99340f5b553e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917657, "uuid": "665c9b03-2e2e-4dc0-82cf-773d91f95b8c", "comment": "Malware payload (Socks5Systemz)", "value": "6ca78730344c447b159804a88bda9c122cd0c4f575f0adc3b52edd68a7d2b908", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917657, "uuid": "962da911-a94e-48f5-9805-9ecdf8e4a94c", "value": "T12A5633252C6C3AF3F150CBB81D38209B5663B59D7737C570B1663D0BDA6BA34CA8C6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917657, "uuid": "144e9564-c94e-424f-96f8-d781b8391af5", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917657, "uuid": "3889d0bf-bd51-4892-bfe9-7cfb5d6341be", "value": "98304:NHYA0lZbLyupeeQPtaebIolCvC4iCFiyvi44qwTrsGAFxwQPHT0mpodi:RwlZCup8PtaZvCtCFii47kGATwQfT0ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731917657, "uuid": "aafccfaf-aab6-4725-aa6a-c4beefc03a63", "value": 5937465, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917657, "uuid": "ef0e9ca5-92f0-47da-8e26-0d44a949a3cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33d8e4d4-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731917699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917699, "uuid": "b21e6e70-c9d2-4192-a3e8-5641eb88c336", "comment": "Malware payload (Amadey)", "value": "0e21eaf5f28b78b503c0c0c7be26ad44", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917699, "uuid": "c1653215-f0a4-40b5-8ab2-26759a1f8fed", "comment": "Malware payload (Amadey)", "value": "cd4cfd58607b5bf73785bc935a34d8ae19cffed6ceddc43142aa986809b3be30", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917699, "uuid": "85180191-e5b8-4556-979d-ad45e5b5f45d", "value": "T1CA95334ECEA129F4FC80B6F7CE2ED9872310DDA58D3991E94795E5DBC70A321B7202", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917699, "uuid": "36d98577-ba40-47a6-bd51-0d9038f4abb7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917699, "uuid": "193a6cda-04ed-4660-9981-9cfb13e0dbad", "value": "49152:3e5Ebzx7M3UNnCaj92gkM51o8yxW1GgHfW/EG/pG:u5EbO3UNnCk9Dhhr1GMgrp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731917699, "uuid": "b76561a8-f6b1-4064-8bd7-7e8a20f2c52d", "value": 1921024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917699, "uuid": "f13d8fb5-6333-44c2-8dd4-dfba9e9db65f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b922c1-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731917947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917947, "uuid": "cede3fc1-b490-4953-9e8e-d7da0ae3f398", "comment": "Malware payload (Mirai)", "value": "eda8b83b17313d5b5649457a98ed5b3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917947, "uuid": "ae08f3ed-caa0-405a-9565-455e94ea8304", "comment": "Malware payload (Mirai)", "value": "67407d64285b413f4939eb994fac415ed1845dec3dbb39bb5db69f3232b7a1b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917947, "uuid": "98aef5cc-1e85-4a03-8d08-4a9149008246", "value": "T15964E08AED41AF25F8C516B9FE1F034973738BACE3DB7111E62097203ADA65B4B361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917947, "uuid": "89910c99-040a-420d-99bb-928fd94377a1", "value": "6144:7O/QJHZweEL/NOjCHm7FZZncRwKSDP99zBa77oNsKqqfPqOJ:78QpZsKCaibSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731917947, "uuid": "a8f5084d-95cc-49b0-840f-f200ceecbc23", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917947, "uuid": "1ba93461-e908-4b03-8fd8-28534b4dfdb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "550509a9-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918184, "uuid": "10a46f91-70a0-4bc2-9e65-366c4acede11", "comment": "Malware payload", "value": "1295628990d51d96148f663c6c2c46f4", "object_relation": "md5", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918184, "uuid": "ad78a0af-cb5d-446a-9237-2751bc037fae", "comment": "Malware payload", "value": "7969d076e97bc585a3e7198bece10b3681a72f614e512453f6377efc7d7f6ee0", "object_relation": "sha256", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918184, "uuid": "5b3fda6d-69a8-49d2-84f6-0611623b8955", "value": "T1D75196683BE7665845C300B2BDA790CA99156F3640E86800F3FCC4E0BFDFA61D1367", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918184, "uuid": "8a85dce1-0caf-4ae1-b560-397cb10a52cf", "value": "48:QgGg2R3irCbOhj7vMZ/+HIby/3TTYrELgDVLw0lyJt0ly63Mn0ld0lw:Qg5rCKhvvOmHFXPLgD60ly/0lyNn0ldt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918184, "uuid": "d5f5c371-b192-4b1d-959a-e0c479a959f1", "value": 3007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918184, "uuid": "9a334633-7eaa-4b41-8b27-e75cc0d73cd3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "566535e3-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918186, "uuid": "87f8b89e-be80-43c2-a57f-83036bac16d7", "comment": "Malware payload", "value": "a425afdd93107653013ccf28ef94a09c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918186, "uuid": "ebec3172-6447-47cc-a9f5-5c87b171a7f7", "comment": "Malware payload", "value": "2889f08f2627298d23d6f7cfe7057d372f9ceafc15250e2dad8e83d87446c238", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918186, "uuid": "9c62d0bc-c755-4c41-be1a-e9d73994914a", "value": "T1271533C7568438A1ACC00F4CAA1658101ACC4E9E3D8B62BD0FFFDBE31CD669953197", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918186, "uuid": "88225feb-3a0e-4e95-868b-3f9dc266fda3", "value": "24576:o9ruUfet+0QP41YlJCqEzejDRtdxSIHwGLn:UzewY7MRt+IHX7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918186, "uuid": "3492a7d3-468e-4937-9c8c-7e0d269093f8", "value": 909288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918186, "uuid": "f04e65aa-54e4-47ea-9844-3606d97ec368", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e60927b-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "394573f5-9469-41f5-a81a-d825840e86be", "comment": "Malware payload", "value": "e24e7b0b9fd29358212660383ca9d95e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "83ef792e-3478-448a-ad0c-a9eb0672e1a1", "comment": "Malware payload", "value": "1c6ed59c11a8dc5d058c71cfccbcfbdbaff75c67a3dc1c5395044ff92b0ddfa1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "075b3700-45b1-40ed-a844-d3b826587374", "value": "T136B1962287EC1777EC97477889B343526774E5209A275B4F1AA0D27E6C333688732B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "4784fb3a-adb1-4018-969f-95f15574a382", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "6cf49e9b-f72c-4fe5-948b-394420f6a66a", "value": "48:6mhoxJU8h7jkH3lBS6F144FJgY7sgGn2S8xS78oJs5qnEOulKvDq:FoxJU8pkH3lBd43sQN8oW5Pcv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918247, "uuid": "26a8f3d0-3e96-48e8-b1f8-c0a7d25e38e3", "value": 5120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "066b8c9d-7fc0-4e46-ae41-fc7ad257503e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a91dbe5-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "49f94052-cdd7-4610-8b10-9f2aa1c3e45a", "comment": "Malware payload", "value": "3d22b8af1cb169a2b3370eba40ac3d04", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "7b521024-0769-4e09-83b4-9e69cc063426", "comment": "Malware payload", "value": "53a84cf3c66f01c9d8e2216ac674057e63f2bc53b5e705b0e709443628be2a8c", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "4a04c84a-da5e-4fa9-b4d3-697ab271099e", "value": "T1AE931886BA82EC67CD154631C5F783292374F2C537C39B03892465352F27BE27E9BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "8eeddf2b-d109-436b-9ed5-de13bfa60d34", "value": "23ae38e1cd9e878e8381818cafabbf61", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "3518543c-c3af-4b87-afe0-a6e84be15139", "value": "768:LDlI66ilk2taV7tFnxp+tqn9J+UD74cM+KiLilLsjAYj49d77ro1:FVTaVBFnxQqn9V7pMuEsEzd6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918247, "uuid": "597ff4a1-d81d-415f-9220-424b77d49fe0", "value": 89077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "83784b84-4be0-42e5-89e9-4d75f89ce27b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ab8be7b-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "87a8329c-015b-4fc8-a81c-1ef194707149", "comment": "Malware payload", "value": "e5b2a873c95351f6160766b13f85876b", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "a08ebd56-d56d-494d-856d-4506bbc2e568", "comment": "Malware payload", "value": "c98e4c722f588768758f1211c6be54aa26e6e926605982c9317ffc2ed163bdd0", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "a5aac3e2-cdac-4bd9-a71b-a1d033136841", "value": "T1D9932986B6C2EC67C517463985BB83293374F6D51B92BB034D3865370E273E06E9BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "a06de52d-796f-4967-88db-56f7fca4c7cd", "value": "db2a1927b646af9de69468533f4b680a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "30143de3-35e4-47b5-b65f-63ed6b4339b6", "value": "768:XQ2cOl6ilYetaR3tFmxK+tqn9V+As6ZAO4cMQO6LC4Lregj495YuQ2ht:0G7aR9Fmxxqn9DZAOpMclar5Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918247, "uuid": "7d744e73-bdc6-4a57-8251-eee83e5a5bd3", "value": 89252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918247, "uuid": "ce33479d-1286-40a4-955e-063ab4d5ed6c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b513fdb-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "21339c03-2e2c-4523-a41e-a3e20d4826be", "comment": "Malware payload", "value": "857ca585f1490025af79bbeae1e4e47a", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "f5286494-3ba7-4323-8aae-8739206622bb", "comment": "Malware payload", "value": "503405180517e852603bcd09544fc18c8afb11d35509a22e4d4a95489c3df266", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "52932bf3-088b-4c3e-aa32-1b303ec05612", "value": "T1F3931986BAC2ECA7C4164631C5F783293379F6D517CA9B034E3567350A273E06E9BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "b94784c1-472b-4792-a1f7-13b64b6dccbf", "value": "730b3013f64d9a382940511b2fd0b33e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "ea18d057-6421-4326-b83e-b538e3fece47", "value": "768:D95r6ilcXtadHtFzx5+tqn91+Izg4cMRuWLt5L6fhQEj49UL76fRBZA:pDcadNFzxAqn9JgpMDv6G3Uue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918248, "uuid": "d82335f7-a856-485b-8ea2-e8abb9c2c0ef", "value": 89076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "acd4e859-c3d6-4554-83bf-00ca830c7a95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b5b2733-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "d4574072-1331-4e99-b6ce-35914fbc6ff3", "comment": "Malware payload", "value": "330b35d652c71197c8f6317bfbb15bb3", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "fbe7c49c-22fb-4b45-8af3-2f46d10175e3", "comment": "Malware payload", "value": "0938b15e182a7fbf68de98acaa661320e9d8f9213ee4e0ee6e9d5c4232fbffce", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "f548cdca-d1a9-4d5e-812e-2495266ad5b1", "value": "T1F1245C87BB8EAC67C115463289BB83683334F2A11783DB171929A6341D17EE5FF466", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "2f18cd79-d597-4341-a810-db9e5fd02823", "value": "c5663b580559ee3a946b9ddb251d0b68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "b9c47845-1e96-4904-9621-5c720cdb1621", "value": "3072:RgnVSUgZGC+JghKabIrqmXmyMP0ZJm1sMqiRt406W8TCsj39whoBB:RCYUTJYbIrqmqt4FnT59woBB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918248, "uuid": "c0590a7f-9a4d-4791-a482-4c2fe9cb6b5e", "value": 222023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918248, "uuid": "ee0ec523-645a-41fa-9691-225c05ccb6c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d32d04e-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731918251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918251, "uuid": "4b1031b8-d525-4e13-b9b4-6e5b7625cf15", "comment": "Malware payload", "value": "e8a48b1f946cd8c8c488a91d21dcfa52", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918251, "uuid": "114537b3-d781-4488-97ac-db975a757133", "comment": "Malware payload", "value": "fabf2a48bbf21eac61931f028a1f714cd804c8b1336266361c3dd0a93b662ef0", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918251, "uuid": "bd0318e6-bbb9-4556-a1b1-6a8195c9e493", "value": "T1BC86331567A109BAFCA3413E89A6D717E6A7BC560721CB9B53F413227E130D02D3CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918251, "uuid": "799f4e3e-2969-41e3-9b2e-5804a3283e37", "value": "a06f302f71edd380da3d5bf4a6d94ebd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918251, "uuid": "a9560d7a-62df-4422-a22c-8aa09f669879", "value": "196608:QF78mZqZJ+2XMCHGLLc54i1wN+bokSaPA8DKnCooZcXKhwE:08m72XMCHWUjzodaI8DKCaww", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731918251, "uuid": "1ae3487a-9d38-4364-bc61-593d94eab22c", "value": 8533803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918251, "uuid": "38ac8574-295c-45f3-ad16-629d9dcd1ef9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "847d813a-a58b-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1731920411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920411, "uuid": "663b13c5-2e08-4857-b073-9de7b4280bc1", "comment": "Malware payload (CobaltStrike)", "value": "e1d05a7237634ffad49c79e38ba0c2e5", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920411, "uuid": "6a3b0e18-f7cb-441b-bc55-17679a83f9c1", "comment": "Malware payload (CobaltStrike)", "value": "22a2f3d36e364fd7153731b015432e7ec172aa3522643f468caf91b1165ac9cf", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920411, "uuid": "1301c7c2-3f30-4215-aa8c-4dbc8946fab5", "value": "T1DC92E93FE31368E9C106D57845FB6733DCB279B385E6931E1734D6B42E106A42EAEA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920411, "uuid": "b412a938-3316-4f54-9552-bac4a9b37fd6", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920411, "uuid": "d99f2215-131b-4a3d-b10e-75f93d21932c", "value": "192:rV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2HkFmWF8qa1Dojjgi:FqaCF31cix+Dc4zjnNFF46gi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731920411, "uuid": "439f5144-6e75-41c5-8fa3-635ba7ca428a", "value": 19456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920411, "uuid": "e25c52a2-9535-4721-b214-7ff63d11ebf3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b060538-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731920637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920637, "uuid": "7fcf7f62-8afd-42f6-82ee-382465a88cd0", "comment": "Malware payload (Mirai)", "value": "4db66c9aa224c1a9e1034da31866a000", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920637, "uuid": "db108f40-dd57-4be9-a038-c51d91f75d78", "comment": "Malware payload (Mirai)", "value": "c1324d2908d0c504645134c68611a32a16b0e314730f3a9e371410043df63011", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920637, "uuid": "04dbe567-ebe3-43b7-9b5c-74ade14fecd9", "value": "T1FC333A81FD819A17C5C1227BFB1E428D772B5368D2EF3203DD25AF11778A92B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920637, "uuid": "e9c8e7c4-8323-4544-9c0f-d23a3992372a", "value": "768:ZEOHuq/L9zxOH8sd2RYpCSoCNIHNhoAayFtdMvhBjNpfQyx1Z5gyKmIe:qOOp8JmCcAfGv3fHxJv5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731920637, "uuid": "5d3ba12c-2863-4927-b0b8-05aba7562e47", "value": 50572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920637, "uuid": "e52f36b2-3947-4a2a-9bc9-fbdd85d08759", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aefb5f6-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1731920717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920717, "uuid": "df2919f2-2ff4-42f0-8e99-bb92ece07059", "comment": "Malware payload (Blackmoon)", "value": "91e50a397fffc5d935b3e8405864a7d5", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920717, "uuid": "4f8d50a0-5911-4b6f-9e13-b28911642900", "comment": "Malware payload (Blackmoon)", "value": "81a239637e31d6443eecdf052bd2dacb46b09edb9a7e84f3b2d140488434a447", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920717, "uuid": "ccc4f183-dc80-4efa-8d73-c3de5c9bed9a", "value": "T1FAE4232C7944E0ACD0F997BA4070B98D488DD590B9F136DC76B43CC6EA58BEC53CC6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920717, "uuid": "c9a3679f-ce9d-4070-a8fd-2159f3e53d97", "value": "51e2101e560f36b10a33f3ea6df5bbc7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920717, "uuid": "52080881-7272-4324-8e62-48d077798e58", "value": "12288:ym2GhpLegzL9KCGPrhg+XDJyyXaExdQCOsJUQ0UKJgQSVPuBF+gfSoS:ymZJew9vGNgmJy4awzSUNVPuBF+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731920717, "uuid": "57210e17-41bb-4690-87e4-3671ae2921d7", "value": 702976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920717, "uuid": "c612fb19-81f2-4aef-a8d7-713b9adceed9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf624d9e-a58d-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731921396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921396, "uuid": "da4645bc-0160-47cb-a49f-1bb54fcf97ee", "comment": "Malware payload (CredentialFlusher)", "value": "5ce51bebf5df5616c0afad430b705cda", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921396, "uuid": "72a39f4c-2081-4542-8f26-89aef8931eb9", "comment": "Malware payload (CredentialFlusher)", "value": "65177fb5a41a621039697bb1c2559cfb544bead0f3a91722008f425fbe89e261", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921396, "uuid": "8ff36d1d-f5fc-4ff6-bd06-5b735c490792", "value": "T1E8159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921396, "uuid": "087d2e1c-63e0-478e-987a-90509637d6b1", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921396, "uuid": "4a426c04-77c7-4b80-a26e-93b48fc8dd6c", "value": "12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaMTT:JqDEvCTbMWu7rQYlBQcBiT6rprG8acT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731921396, "uuid": "0cfb79a0-4c14-4855-acd4-9e8c362f1f9c", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921396, "uuid": "b4b4faed-548f-47ac-a7f0-c95a1a1bac87", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6030ccd-a592-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731923474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923474, "uuid": "5ee9396a-af20-47a7-bad0-dd34417a7ff4", "comment": "Malware payload", "value": "28e20e5c4208f669450d98507229efeb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RevengeRAT", "colour": "#3714bb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923474, "uuid": "d39dc08d-aed1-4f56-a13a-f4e8cacf1679", "comment": "Malware payload", "value": "181d145874e0f2047f829d29735d445630c034bdc5d074e2b47437e55db718b0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RevengeRAT", "colour": "#3714bb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923474, "uuid": "beb378c1-dbd1-4ade-a5e6-4b6d179d5a0b", "value": "T1B2F533274BAAD29FC7FC7230A88383C37B74026952F0ABC7548169BC5D58B1D15B1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923474, "uuid": "fd0d3644-74e7-4bf1-803b-1d6880581ef2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923474, "uuid": "f62cb972-d1fa-4c4d-9e4c-b878aab070b9", "value": "98304:PVHTY7RZkcxE7TCkVseCH6l6wUsGZ3mPqqUA4tL5:JirkAE7OkVseLksGZ3oq5zV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731923474, "uuid": "a1be28d4-f747-4d2a-a669-10beedf546fb", "value": 3416064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923474, "uuid": "c737ef66-31a3-4327-8687-da03f6283177", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7973b2b-a592-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731923476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923476, "uuid": "b406e42d-7253-4ae0-a8d3-c6fcfd17522e", "comment": "Malware payload (Amadey)", "value": "2e81d31febea391b0141ce7d35d03e3d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923476, "uuid": "e1ae7f53-e0d8-4cef-89c5-6294b74b0ad7", "comment": "Malware payload (Amadey)", "value": "db0c5692929a7a26b128f2c7a67c2d1499202efc49c53ac24dc0ffdba91ef502", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923476, "uuid": "56b5ebbb-3414-408b-ac7d-41cd022941fb", "value": "T1559533FA4D71F85ED0A151B034B3CF24B3A92B25E6666FD13AF42FE6B77104880876", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923476, "uuid": "51a88f87-27a4-4978-acf4-dc8230cf7d20", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923476, "uuid": "032767d4-f864-43e2-8557-c7099eeaaf35", "value": "49152:2wnx441y3RjOvuZ/ZExKQet/zdYQWc31QJqJ+k:2Oxl0juaExvEBYQWclOqc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731923476, "uuid": "a205c7f9-eb5c-404d-b5e5-c73b99328f39", "value": 1915392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923476, "uuid": "be1cbed0-2542-4030-a6bc-78a4e529e7c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "508abf2c-a593-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731923760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923760, "uuid": "eda19afb-fddc-4559-8058-e6ba5adaeeca", "comment": "Malware payload", "value": "6f2813d01a83cd90c821f484fe5152b9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923760, "uuid": "f283dab3-577a-42c8-9553-147566b886ae", "comment": "Malware payload", "value": "cc31d856c279e201b21f6c7edc186df95c0201526019ed58e128a8e9b98219ec", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923760, "uuid": "c20943fe-4f1d-449b-a6ec-1e5ce72ee9d8", "value": "T1099533777A518607F25029358BBD802E3FA23009ABAEDD4CD84125775AA327F6CDF8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923760, "uuid": "7b1a2948-7027-443d-9b78-5b5b3ddc6e6e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923760, "uuid": "65e317e6-0aee-413f-85d3-c715d5a194b7", "value": "49152:fk74pJTfjlegJYQ0mnsBsKhtKrxLT3wKmQLfT:87GJTbByQsUJLm2fT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731923760, "uuid": "a3ff0759-2716-485b-af81-5f74c21956ee", "value": 1989120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923760, "uuid": "9fde4c8c-9113-4c34-880b-cf9a4c7569a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e84653f8-a593-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1731924014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924014, "uuid": "6057a35c-e830-43f5-865d-47f46c2ff86a", "comment": "Malware payload (AsyncRAT)", "value": "e37d1c93d6a35e4c9b309e94fcb16770", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-29OCT2024ESM", "colour": "#f0f80a", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924014, "uuid": "e640307e-bac5-4b05-94e9-36b544ff7903", "comment": "Malware payload (AsyncRAT)", "value": "eb6e8a6e57d3c3e27dfc0e5d63ed07640e5d6ceebcb072f58a60ddcfc3f00dea", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-29OCT2024ESM", "colour": "#f0f80a", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924014, "uuid": "9bf950a4-df8f-413e-87a9-f78e8d1653a5", "value": "T134A533031F0FA70C68FAA46BB91DD4DB780CD9BCC01749B2F5F7A11E1E919565C26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924014, "uuid": "7ec51c23-7e1a-4e01-888b-514a8b887892", "value": "49152:CyO1YUqKuvNwBCyUiggqo+WfZSH2ZjmZwnwQweLse3jc/:CCUJggP+USW1w/aH3jc/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731924014, "uuid": "1bd3d9a3-1d5a-46b7-b0b5-3b11a9d34ca8", "value": 2183989, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924014, "uuid": "da04c75f-c08e-4d4b-90d9-5b02660e0e34", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a965529-a593-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731924342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924342, "uuid": "112cf10b-4161-414c-bf15-54755ae89ebf", "comment": "Malware payload (Stealc)", "value": "f692c576c881c1e7b724c856492a8571", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924342, "uuid": "a9727389-d230-4b13-b6c5-1b21e1fe93df", "comment": "Malware payload (Stealc)", "value": "d3a54c09db421afd6d234719c04e2c73321adf1166536b0abcd9db8c1c3c186f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924342, "uuid": "28351ca1-ce4e-4552-8f0a-ebb0d12ddc0f", "value": "T1858533F84A6E80B1E95E787A3ADD07D4161CC10A005AE5BCEFBC947E127633257A7F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924342, "uuid": "18520e33-b9ca-4798-86d2-514bdc2784f5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924342, "uuid": "7ab20d4e-b194-42ed-b636-b91d3f59e98d", "value": "49152:vlaohRHGJMAFRURx1JlyjFoatFoHIdn0J:phpGnFRUrQjFoAFyIqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731924342, "uuid": "b3a7d373-6392-4b32-b3d9-3c6110b49b70", "value": 1832960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924342, "uuid": "f5d1345d-5c53-4267-97d3-5a579a112f11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d09e730f-a594-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731925165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925165, "uuid": "8705c539-6a18-4bf6-891f-aff13f35798b", "comment": "Malware payload (Healer)", "value": "a1c8734e579b90d090d86be32a68ae20", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925165, "uuid": "9a5db390-5ade-4060-bac3-e323266387f5", "comment": "Malware payload (Healer)", "value": "29d491f420c000fe76468e7129ceffb1328551c10896a7fa43fd05b343b95072", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925165, "uuid": "025f5841-b6c4-4f38-acc7-3a2434b1fa47", "value": "T1ADD55CE2B50972CFD4CE17789267CE62D95D47F90B2448C3AC6CA4BABE63CC115B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925165, "uuid": "2e16d87c-f5f7-4cbf-953a-3c61145b77e4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925165, "uuid": "b011633c-cbab-4dab-8bcc-226824714e9c", "value": "49152:a5oUxxPa+ebAEwGDLjyYs4RDlR4Kd498Q27p:KdxxPzebAzGDLjvs4RDlRj4/wp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731925165, "uuid": "c79f6ffa-6c7f-4255-8f7a-b1e10a587a91", "value": 2750464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925165, "uuid": "1501d3d3-81f7-4615-879f-e8cdce23bbbd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "024fc3f7-a598-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731925776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925776, "uuid": "6e866789-4a1d-4471-8a79-0ee003888883", "comment": "Malware payload", "value": "2659603c88eee456dc5f9a3bd439cd93", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925776, "uuid": "0961589f-a7b6-4ce8-a35e-c602726902f7", "comment": "Malware payload", "value": "65d8452202f5102505deb092f1959c84301c4eee000a5c0b57a81ead4e4e4e96", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925776, "uuid": "a1e59da2-b285-4b63-83de-06f0f7d95df9", "value": "T17524BF85B387EAAEE49204D76CBDC9F0C860929936F725E50C0381850BD74FF769DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925776, "uuid": "67022be6-a19a-4aef-a97b-1d558e760acb", "value": "6144:jNYz4h2/TVz0Bc0GdbHwx/93ABvMJalcufG45jB:ezJ/ZQBc0EbHw92vgscufrj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731925776, "uuid": "40a83640-876d-4687-8a3d-b4c0fccf88f6", "value": 223299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925776, "uuid": "e173b209-d463-4d97-b4a7-9828e459635a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "584512dd-a598-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731925920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925920, "uuid": "bac0e0cf-de73-4b86-8626-3857d6268aef", "comment": "Malware payload (Mirai)", "value": "9fa35033bbe8447734b200d4c4d9e2a8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925920, "uuid": "105dd0ac-5e7b-4536-b5da-6f2d21a9eabf", "comment": "Malware payload (Mirai)", "value": "61e138283d2d40beb18d714d7f25bb8b142a5d8e4c02fef6b9cac19befe76016", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925920, "uuid": "ec7d19a0-a4b2-42f8-84b2-a61d992e4422", "value": "T10A22E1D943C4E9B0AA488D66B761D8C5738C4FD6CD858D048D9928EADA47FD8BC32B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925920, "uuid": "ffdeb643-19e3-4278-bfbb-840f17274909", "value": "192:JgMbLbWKpUdM9EcmWm3bNCmWm3bI98bLbWKg:JgMbLbWKpUdM6cmWm3bNCmWm3by8bLbo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731925920, "uuid": "9cfc24c3-5532-498c-b872-fdb1caa6f8e2", "value": 10746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925920, "uuid": "1b5d41a0-8531-4869-9c9d-c5d20e6177b1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "342eaa6b-a599-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731926289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926289, "uuid": "6eb92a44-5ba4-4b40-a028-e30644b25e04", "comment": "Malware payload", "value": "45db983c986e127b36c1ba5a4e5a7a71", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926289, "uuid": "aacf1f8f-bbcd-46b7-bc9b-08d777aa8351", "comment": "Malware payload", "value": "2e96176398c884e298ade8b1b3ef74a5e45d5ca2e092ad6a37f6bbbccfb32e93", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926289, "uuid": "15a852fa-6542-4814-93e6-eee39af60c21", "value": "T10C2210E972A0E5F0AA40CD123AE1D00E73AC40C94D8DDF14869918AEC879FD9BF36F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926289, "uuid": "8229955e-48c8-4c52-bb1f-9e6582eb0d25", "value": "192:mWKTg7AwgPoPYPbWKuYIz78Epamb9ljcku7/LWVYIZ7DHyEhha7hhfywygym3btq:egauebWKwEu/ISfPm3bBHfPm3bxvuebX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731926289, "uuid": "916c7226-e25c-4cd1-8e73-5dd5913134c1", "value": 10662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926289, "uuid": "0d279f51-65bd-4e14-95d9-a54ac8929061", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a198ff29-a599-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731926473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926473, "uuid": "9748dd8b-c692-4ec0-b0d8-78ef1aebd077", "comment": "Malware payload", "value": "51b608f9ceb05c7cd0816885ddc1a402", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926473, "uuid": "4111b279-d9a3-4f56-b710-e2481adfcfb0", "comment": "Malware payload", "value": "bb2a34df2c9107f65c156be32cc104a3ddae271bb5c4904930fbfb8c42157391", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926473, "uuid": "3c3ed802-d627-4a13-be7a-ca2d5fe49d79", "value": "T15934F1EAAD0EB26C8C4C1975F8042CDDD47AFDD96E7DEB07214B98DB8C481C319168", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926473, "uuid": "059b40a0-7cc9-48f6-a4d4-84528ac90fd7", "value": "6144:Eoh4vRUSaRMwd7oSX3vUCGjEzEMcVYfsi1n/2ZU3/73K:EKeUSZvSPUhEzXcGk2ue3/7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731926473, "uuid": "699cdf78-067b-49ba-b313-06f587891fbe", "value": 247869, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926473, "uuid": "e69ea779-2b4d-45a0-b303-2c7067e84794", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd13e328-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731926975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926975, "uuid": "d7cd69f2-19ae-4732-b8f0-fd58a70105e0", "comment": "Malware payload", "value": "6a2fdbba6b61fba2760c30c59c3e9be6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926975, "uuid": "198b7044-4679-4377-9154-17294d42e73d", "comment": "Malware payload", "value": "06365ec7824559eec0eb96d0242e30133da06b57982e746558303b0bd7f474eb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926975, "uuid": "0085dbde-d910-41aa-ad78-b62b36ce59b6", "value": "T159557D23B692C433D4631B398D17E7D9592ABE202E38598B3BF56F8C5F3964139192", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926975, "uuid": "b37f2b69-fb7d-4289-88db-c3b8c81fe765", "value": "4686875a6647d5f1eba9908017483e7b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926975, "uuid": "0bf513e8-75b3-48d3-ae82-276b79221915", "value": "24576:ESxlk5IX3BhXka3tXFPYbF7eED9StjOpZG7CDtUMUnUUUUYUUUUOUUUUU:ESBBh0CEzJ+cZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731926975, "uuid": "0d2b14c9-c75d-447e-b7b9-76c0708058ad", "value": 1393664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926975, "uuid": "c30d75d8-6f9b-4bb6-8bfa-108871e7c741", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce1e60f2-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731926977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926977, "uuid": "36d2eba6-2b4d-4263-8340-46a0ef708756", "comment": "Malware payload", "value": "a13e1d3390542056bb6171fe2dec6078", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926977, "uuid": "35de7b4e-e6a1-4925-b845-d796da5e3f3e", "comment": "Malware payload", "value": "8293f2699d4a8a25220e8f763b05253ffde5ffd8eca370f2ec9c7fc802293da6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926977, "uuid": "2f2bf600-60f9-428e-96a3-3bb04f71bd43", "value": "T12D556D23B692C433D4631B398D17E7D5593ABE202E38598B3BF56F8C5F3A64139192", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926977, "uuid": "1d933312-042d-49bd-a8fb-f983a551df56", "value": "4686875a6647d5f1eba9908017483e7b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926977, "uuid": "4a1f2141-1866-4bd4-8690-b5b472f73beb", "value": "24576:ZS9pk5IX3BhXkaLdrFPYbF7eED9StjOpcQi7ilDtUMUnUUUUYUUUUOUUUUU:ZSBBh0u4zJ+ccQq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731926977, "uuid": "2db1933a-7de2-4e54-a410-bb585dbdbb7c", "value": 1393152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926977, "uuid": "59d1f9b2-f253-4915-871b-fd238ec12536", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf345be4-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731926979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926979, "uuid": "ab43b5d9-f7ce-4e14-ba77-6a069e17bb80", "comment": "Malware payload", "value": "c3d38d25a35799a59e9130e6820fa807", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926979, "uuid": "5025b18a-e6d1-4ead-8d57-9c24c202c453", "comment": "Malware payload", "value": "2d5e81f5bbb8e6176ef97a7f64447cd21fa22174f4a9b0d59891044bebea24d6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926979, "uuid": "dac1f070-2692-46bc-95f3-221643c0875f", "value": "T16C556D23B692C433D4631B398D1BE7D5593ABE202E38598B3BF56F8C5F3964139192", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926979, "uuid": "965d0d7e-5f8d-4e2d-98cd-858ec1583bf5", "value": "4686875a6647d5f1eba9908017483e7b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926979, "uuid": "47fceafd-b2bd-4a30-a733-9098138066e7", "value": "24576:ZS9pk5IX3BhXkaLdrFPYbF7eED9StjOpBQi7sQDtUMUnUUUUYUUUUOUUUUU:ZSBBh0u4zJ+cBQq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731926979, "uuid": "fa48920f-511b-42ae-b4d5-ecf3d3e78b6e", "value": 1393152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926979, "uuid": "05b68bb1-fe17-4b6a-9f97-71020ef6e27b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8a64638-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731927021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927021, "uuid": "0e9a0fcd-1faf-490f-9cf8-a03002b47006", "comment": "Malware payload", "value": "30500c4f8fa29e70e2d6f0ec5919ad11", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927021, "uuid": "f19a8fd8-00f5-4a5f-92de-8d0fc96f1fae", "comment": "Malware payload", "value": "70db62d27f08e3f2a0a68f4b38bbf0584e62d77c9c05d87ac53bcd1f0779cd78", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927021, "uuid": "c149d042-828d-4167-a120-92de1886f6af", "value": "T1C5357C23B3C1C433D6771A389D6BD795593ABE102E28694F3BF42F4C6E3968139252", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927021, "uuid": "a9a537b3-dda3-410d-8346-15c6de3e71e6", "value": "7312ade554996dfdfab5124e11fc7653", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927021, "uuid": "9dcee52f-aefe-4a71-a806-8dd3aa9e2321", "value": "24576:ElR6ATE7bU9ExxE+lkLKTBXnFAzvvlwVxDtUMUnUUUUYUUUUOUUUUU:WJixwEyw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731927021, "uuid": "8e8bdea6-e2ad-4f0a-803a-1d91e34b131a", "value": 1091072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927021, "uuid": "65386a9b-e9da-49be-aa30-cc4166424a55", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2542c598-a59e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731928412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928412, "uuid": "2f8e63f8-4e13-4bec-9031-b59f4e0a0671", "comment": "Malware payload (Mirai)", "value": "de7bf1d157552ce338f1ace2e428f1da", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928412, "uuid": "e01f3e6f-ef86-4d1f-82b2-541ee3047a8b", "comment": "Malware payload (Mirai)", "value": "cf5b76bf11edb09770ea6751d50d68aa7d898976c88126868938c1e3cf463660", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928412, "uuid": "6a76b145-ec1f-4ea8-a420-092616df52cb", "value": "T1E322EEC9618485222DB0CE1B356598E55A0C6CC94DCC8D198CD928EE8C4EFFFB4D6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928412, "uuid": "b5fc9bf3-5339-4978-8fff-10947731688d", "value": "192:UgGQAbWKO0MJwh+VFm3bdxVFm3b2QNQAbWK5:UgGQAbWKO0MJc+VFm3bdxVFm3bXNQAbx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731928412, "uuid": "8f96aae8-439e-4679-b5d2-922486e15ea5", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928412, "uuid": "832ff643-a83b-4a7e-a706-e919369615cc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29bd0e43-a59e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731928419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928419, "uuid": "f752ebe1-7906-4d4c-8457-9652c00e69a1", "comment": "Malware payload", "value": "856442108d2f7a860caf438a66387ee9", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928419, "uuid": "7c21879d-db3e-4b69-9f54-3f4b07b47cbd", "comment": "Malware payload", "value": "0177a5391ecc77736c8898781de297c812005cd92a7addc4e1e43861c5e4ff48", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928419, "uuid": "fd00468a-570f-4a92-a832-b8c3aac38250", "value": "T1D234E00219CC4AF907FCA45F4A1BCAEF72225D884222ED4C551BB9D51DE49EE61F4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928419, "uuid": "f1e9c3c5-4c09-4fb6-add8-9fbfa49a19d2", "value": "6144:Az73D8k18QpN4JD+ZCSKQJykobTwaLODkIeoMr:A/3Yk18ss+ZV9JylNTIsr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731928419, "uuid": "8afbe787-d3e4-45a3-b7ef-e873fe40c417", "value": 247887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928419, "uuid": "2f4a5677-771b-4791-b34b-e18b2e1ed51e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee4d9f6-a59e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731928589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928589, "uuid": "7601faa4-acbf-4819-b4c9-0760939a24e9", "comment": "Malware payload", "value": "d37d3a53d7894164e6707847360399c3", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928589, "uuid": "a3b2c158-b1ea-46e1-acc6-0da1483bdf63", "comment": "Malware payload", "value": "4a81f8193a4f4bfbf1e6cca16421e0400a1a58e690a854aec5ccafb9e45e1df5", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928589, "uuid": "a5e74330-1968-4155-b436-621f746f3f39", "value": "T193163301C382CB1EE40D8BBD12957F1CB9BED06CDA75E64A3D157C6D6903B18E4AFA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928589, "uuid": "239e3a59-7783-4e36-8c34-e301737d1884", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928589, "uuid": "2dba7b32-7b74-4c1c-8721-37130bbc8c26", "value": "98304:MZdMx+1giJSfKI73N+YREzLZc5X/cBORLN6IhxDt/C:wdcugisiq34C3RIoxDt/C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731928589, "uuid": "064585af-2edd-4565-b000-471eaefb15eb", "value": 4413440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928589, "uuid": "c7f5699f-e1e3-4b1f-8359-70396a7c5f7c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23fcefb3-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731929698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929698, "uuid": "bdaa2bb8-3b84-4be7-a3aa-37449f7aede2", "comment": "Malware payload", "value": "74c632f39ab69f79675de4a694d2ac24", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929698, "uuid": "00403576-953f-491c-9f11-63002f737641", "comment": "Malware payload", "value": "403e1cddaa8f3e39e243b5f5821cbdf9bae432ac63e339fdfb76944a4561f192", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929698, "uuid": "d9b32208-5aef-4139-be07-07148edc4df5", "value": "T13524CE6BCD608821C4952CF9FAA2F1F10821D788A5C6F684D516FC79E93B3936604E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929698, "uuid": "f50a5edb-c2ff-462f-8b1c-80e61e8aa64a", "value": "3072:hY4PS5ZTkLffEcLhSx/Rk/y4TYmwfB2pLTgv611JlgYYNTOBJAce:hY4NcahSx/Rk/zGv45gYYNWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731929698, "uuid": "eb458cd8-949e-4c1a-9bdb-192fbebeb0d7", "value": 223300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929698, "uuid": "13a15d66-2184-4c52-a9ac-867cb55b4fd4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d00d9ded-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731931275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931275, "uuid": "adbd115c-c40b-44ff-9d20-63655d4d39cb", "comment": "Malware payload", "value": "9573e2ebda676ca274ef34e74f1ae9cb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931275, "uuid": "b26bc966-8bdf-40c1-a23e-a8f1f5ec5627", "comment": "Malware payload", "value": "f529fccbca5cbe72b562bca6e48a17917fff867cc2e7abf2629ece002c6f1118", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931275, "uuid": "9105f1ab-62e5-41fa-83a2-9e419c99dc04", "value": "T15FC69D0FE952D079C1978970721FA65B3E34B750031377AF2BA0697DBE2FBD01A29A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931275, "uuid": "fd4e4a75-14b0-4dfc-96f2-3a6cfb3949cd", "value": "98304:TZsc9iv1N7DB+T2/oOR/GUa5l7SoQE+MEAQ4MCe6NKMXy08c2fcRFAnQczQXR9OE:0a3RBP506NRXV8c2fcRFAn2h9O3uLB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731931275, "uuid": "8c690818-fec3-4dd9-9885-aa64f3a3c853", "value": 12084736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931275, "uuid": "4b588e04-122a-4373-a7dc-190eaa55eec8", "value": "application/x-tar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c65838d-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731931672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931672, "uuid": "a87e2baa-15a9-4b43-baa0-c22ea14b6e8f", "comment": "Malware payload", "value": "ccae30788f4e85c07d21409c52929bd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931672, "uuid": "4dc3099c-44d6-4599-87f1-5c498e23e8da", "comment": "Malware payload", "value": "7e5e0829f6c6740ffe91307ec3783172517b812de9f348fd98374b1a66b1237b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931672, "uuid": "1be1a8d3-c1cc-4e01-ac73-e12a5a0e3ccf", "value": "0EA2F18727983743A46355F4F27CBF8A72023EADAFBE582B40453163706311FA60887B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931672, "uuid": "110b1b68-4626-4ab7-b549-57b32bcc7ff6", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9Lrg:YTYIDfYG6ZmewZ59+Nw1qsRg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731931672, "uuid": "96ce982c-43c1-4a10-bb29-ea5884276bf0", "value": 23168, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "407210cf-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731932323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932323, "uuid": "cf3f1edd-c5a1-45b5-a0fa-01e29ba4527a", "comment": "Malware payload (CredentialFlusher)", "value": "ba6b36f33bdcdba751b6955c246a091b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932323, "uuid": "7aacc604-069b-4300-a765-bf5739c4305f", "comment": "Malware payload (CredentialFlusher)", "value": "a44d411681fe0c2488f8b1933e13049c9564f4cb1f2940e5cfed1908068aaa96", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932323, "uuid": "c123485d-0f23-46fa-b115-be846fe7dc5d", "value": "T107159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932323, "uuid": "785ff154-4a89-4a52-a145-1196ff8a4836", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932323, "uuid": "a4dcfa78-931b-4deb-b9f9-38ba6618aa87", "value": "12288:fqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga7TF:fqDEvCTbMWu7rQYlBQcBiT6rprG8a/F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731932323, "uuid": "13cf0f13-bcda-4d5a-b795-75d63c62a321", "value": 923136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932323, "uuid": "d97a3507-d67e-458b-af95-ffe77159966a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08e9abb7-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731932659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932659, "uuid": "94ca40b9-df7c-4a78-84e8-332e61410c61", "comment": "Malware payload", "value": "18faf8998c3ad7fb447826f33aa2a516", "object_relation": "md5", "Tag": [ { "name": "b-cdn", "colour": "#68F447", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932659, "uuid": "8563cf3e-4580-4f3f-abc6-037bd901ac6c", "comment": "Malware payload", "value": "d4267bc19587b2d6b51f63ab2bcf6cfb8b791c7124fdcb46fa2312912f6d7623", "object_relation": "sha256", "Tag": [ { "name": "b-cdn", "colour": "#68F447", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932659, "uuid": "aca9039f-72dd-406d-b1d0-d99063892ca0", "value": "T11A4733309EA93C7907AC822A70BF6F2D1EE00FD7C44CE5EA53D060C7565EF8199678", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932659, "uuid": "844e670d-3278-4781-9334-d2188ce0b3d7", "value": "49152:LONQ4a/YR9JiKXeLZyhpsPC9+fe+Q1Iu/LtTtPGMyFDOlOUBNYH1CHlUw1eesrmA:n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731932659, "uuid": "f8988cb7-0e04-4428-a90c-1bc463e82635", "value": 27028502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932659, "uuid": "0a71d807-6be2-4776-bdcf-0dfcd84ae879", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44a20288-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731933189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933189, "uuid": "565128f9-6dcb-40d7-877a-9f484635282e", "comment": "Malware payload", "value": "6469b6413335220cf0bfc21c344b229b", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933189, "uuid": "37f7b85a-7abc-440f-908e-91b564d10e0d", "comment": "Malware payload", "value": "a170d5a665d3639726a2bb939d96ae9647a80bcfecf9a854d6a50d6895250791", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933189, "uuid": "fe24258f-6560-4547-ad20-3723e826498c", "value": "T1AA41ED1157E41336F7730732F8BA543663327C42B692D97E4493422E04726018ACAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933189, "uuid": "07354715-e562-4161-b51c-6f0a4734960b", "value": "24:8i/lX8H0YWcY6/wHcmVnHE58K0vqvCj+7SzrJ2JQvM61oJJ2D0vqa:8i/liWcf0cIHPCv7E92J2g2AC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731933189, "uuid": "8e48ac18-e8c4-4441-b741-beb271e0ab09", "value": 1967, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933189, "uuid": "2732ea2b-6561-44a9-97d3-26b7a3ec4703", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45138b37-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731933189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933189, "uuid": "9853e3e0-24a0-46e4-aa90-99fa15ea1f14", "comment": "Malware payload", "value": "842132a519bc8f532382c78c1895cb02", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933189, "uuid": "6d13d670-30f6-4ccd-816b-1c14805837de", "comment": "Malware payload", "value": "b5bb66a242f901ac5c82eaa653209a45faa6efc968282e1ad1af38738947fadb", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933189, "uuid": "f2b7f840-39fa-4040-8792-b85f2d40f465", "value": "T1EA41CA1263E11377F6734B30B9729673A6377803FA81AD6D5423412A0073B158A9DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933189, "uuid": "213f182f-6acb-4400-bc5d-9842bcb822e5", "value": "24:8nps8zZHWWY6/wHcmPnqQE58S5V74DCj+7SToX2JQvMP37tAX2xV74u:8np3HWWf0cuqQE74D75X2JzKX2j74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731933189, "uuid": "6cea8f42-fa9a-4821-9f5c-d2207fe70410", "value": 1938, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933189, "uuid": "1fc940fa-59bd-4fdf-99f6-5a806fc1fc96", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52187d4f-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731933211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933211, "uuid": "5cabd49d-8d33-4820-982e-a5050ac1f3ce", "comment": "Malware payload", "value": "ba9ea5989e97bd7ace40aba1ada84887", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933211, "uuid": "c76e4a65-78b1-45cd-ba30-3fd45c4b06ac", "comment": "Malware payload", "value": "7aee60a755c44140a88c6e31300755de1edb634f6cc003f42bb51216584aafac", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933211, "uuid": "baa7835c-25d5-439d-9ce2-6ba06d618dd6", "value": "T13CA72392978A0275C5A2FEFCA54C0723B10DF5C8231DA25F157D11F04A9E58B1EBBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933211, "uuid": "c748aec9-691d-4ea4-9794-6ebc7b8d0258", "value": "786432:dJORVRgDXXuC128LqnEy1iG38+7GT5JeMPwS4MzO48mOTtv:doRVeDnI8LqnzhMDdJJ4StzYth", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731933211, "uuid": "a03fc36e-9d3e-4e15-86f0-050acbcf2e7e", "value": 45218828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933211, "uuid": "d37bc02d-c936-4a87-a403-fe943aebd1a3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52cd4c2e-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload (StrelaStealer)", "timestamp": 1731933212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933212, "uuid": "687f88b4-ca14-4652-aee0-e7309e7bbb57", "comment": "Malware payload (StrelaStealer)", "value": "c3c422aa8c3170557f6e60bb1951d761", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933212, "uuid": "bb66db0b-d761-478d-8762-20f9715cf9b6", "comment": "Malware payload (StrelaStealer)", "value": "2cc5fac8873e90b1ee3ecf0b8b322b484a12b64548db9a341a1751628d059b9c", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933212, "uuid": "357dad8c-331a-417c-829f-4b15dc4a303d", "value": "T15EB72352D7BA6275C5A2F7F8B5480223930CF988131DA25F147C13708A9678BD7AFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933212, "uuid": "ce7f12c1-e848-4b65-a783-648e1a2ddfd3", "value": "786432:0wDXXuCVGeLqFnigkSLNWPO7qhCDp8mkNr12bfgG7OL1JyxVEc19ej:rDn8eLqFioJDOhcam8rQoOq4xV5Ij", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731933212, "uuid": "ea101e4a-39cc-4a43-8d76-023e13fc7264", "value": 51217939, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933212, "uuid": "097fad44-4ea1-4859-a345-e6afec7e675d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ff2f96f-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload (StrelaStealer)", "timestamp": 1731933261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933261, "uuid": "86685d6b-fde4-4a9d-8a11-ee9409a687d4", "comment": "Malware payload (StrelaStealer)", "value": "8e53a0938e764ecbcd5cd4901b1475a7", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933261, "uuid": "5bbfa1a0-71b5-4f55-9919-d9c30bf3c477", "comment": "Malware payload (StrelaStealer)", "value": "8bc7b791ca087f055f9018deff3d628d0a1b9411d8d3c54ece1c35d2d37ae2dd", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933261, "uuid": "f48f275e-b710-482c-b2db-ded873c39f9b", "value": "T1AEA72392978A0275C5A2FFFCA55C0323B10DF588231DA25F157D11F04A9E58B1EBBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933261, "uuid": "5aeb478c-5e50-47d8-993f-f368a560b9db", "value": "786432:y0gDXXuC128LqnEy1iG38+7GT5JeMPwS4MzO48mOTt8:y3DnI8LqnzhMDdJJ4StzYtm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731933261, "uuid": "a3205e71-0054-4f47-a650-32335a7c5b31", "value": 45037456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933261, "uuid": "ec6ed7b0-eddb-4e20-b8af-0a5dc8f7d5fc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "125e8225-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731934822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934822, "uuid": "bc7ff6a6-97e5-41b4-a612-b8c6488df7e2", "comment": "Malware payload", "value": "4f70ff36dea18bd35e2a8688f8c0df0c", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934822, "uuid": "d0c5ac86-f2cb-4589-9f5b-f6cd122bb929", "comment": "Malware payload", "value": "2d2d3222ff501650bd2f033f3e91fd55d2bc3b949e66ccc75ec9d462bb50bafb", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934822, "uuid": "61beb9c6-1365-4b6b-9207-a0238c5d775a", "value": "T1ADC5F196B3E804F9E5A7823DC8970A0AE773791503919BCF03A486B21F276D35E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934822, "uuid": "c945339a-7af2-4a48-8767-52f40fb3de6b", "value": "fb701bcb0f600ee01f4f529e1b3e9476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934822, "uuid": "2efb0e38-0169-4c69-93ee-0bdbe1567a34", "value": "24576:PSqMZN8DPK8HqVh0lhSMXlO/zrrkEbHfrUX4EokRr:PS1Nn89enrtfrUX5o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731934822, "uuid": "7650a2df-bb4a-4892-a0ca-9bc3542f2fe0", "value": 2742272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934822, "uuid": "fd598e47-99f5-433e-8c7a-031d0a052443", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eea18f3d-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731935192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935192, "uuid": "e9ea100f-8a74-4551-9502-8721e2536409", "comment": "Malware payload (MeduzaStealer)", "value": "c823ef8ad9ba037644cb58dec685bae5", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935192, "uuid": "f25c4037-78c8-47a2-9f51-e26700f83f30", "comment": "Malware payload (MeduzaStealer)", "value": "f3cb381e29fe29872b86838500dc6ee2f810865bf5a0b1cd4718b0036c3d51a5", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935192, "uuid": "3e7fff3b-57d8-4b0a-8af9-f3f26454013d", "value": "T150555B65195C03E9D8BE9138DEAB8A12F575380903B1E7EB1AD147921FE37E09E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935192, "uuid": "7205c775-5f40-4940-8dd0-029a1cba31e1", "value": "0095cfee1cdfcef936c4c086b6b4fe85", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935192, "uuid": "d6d64aa6-d9e5-44f4-98dd-c20ee234abef", "value": "24576:OgAMXnXkciEIMJQZf8Us9Mjemp5wx1wach0lhSMXl5+T+d:T3Xn0ciEIpkUs+egSx+ahp+TK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731935192, "uuid": "e89a18b7-d495-4bba-8b80-e29404361cff", "value": 1292800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935192, "uuid": "bb9080ad-f353-45cf-adc3-542737da6960", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16f41eaa-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731935221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935221, "uuid": "97dd5c16-cc8d-4a16-b71f-f3ccfd07b0b9", "comment": "Malware payload", "value": "b7c1fb454c8c20aa7fe7aeb6180d412f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935221, "uuid": "f350004f-4063-413b-a797-a583394247a7", "comment": "Malware payload", "value": "810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935221, "uuid": "eb4dcd6d-8985-49d4-932f-fe92b23db10f", "value": "B9B2E18622993703A4635AF4F27D7F8A72067D68AFBE943B45503123707321E6758C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935221, "uuid": "20fa42f7-79e4-4d8a-9499-e99b437240c2", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9LrEQSXh:YTYIDfYG6ZmewZ59+Nw1qsREHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731935221, "uuid": "491aa0f8-d7dd-44e3-9b95-83e02e247bc8", "value": 24616, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2800d517-a5af-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731935718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935718, "uuid": "0c1b6dd5-397c-45b1-8feb-8a0b471fdd4f", "comment": "Malware payload", "value": "240c6f8166ef8bfd5330b0fb51b56f03", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935718, "uuid": "33f8bfe1-8c9e-43a9-a956-3acb42d9d561", "comment": "Malware payload", "value": "03e1a0d9f22c29b4b1f8f61a90b5d2be5ae5428f5cd364dd28df14e50d4ac132", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935718, "uuid": "c1147e84-eb85-4dcc-a369-aa64edae5736", "value": "T15B3733BCEA9057B66AC2EB89D2952059F1937F297D038154AB2C80F38325FDEF4357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935718, "uuid": "dc146df0-4e39-4cca-8741-0791c5c5b1b9", "value": "393216:kSyvVsEmvGogn5fz1Zw6TnVbONqQX1LpGUCJbKzJUBK5BIPUwMNCgWtC:s2Emuogn5fHw6Tn2X1tUGCMZCgWtC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731935718, "uuid": "7d7e3f30-6d77-44bb-b566-4d694b0784c9", "value": 22499763, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935718, "uuid": "b822a986-6966-4e7f-bfb1-a9a222f7fbf9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51085b57-a5af-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731935786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935786, "uuid": "87bc80c3-27bf-403a-98f9-977d3e9d249d", "comment": "Malware payload", "value": "f68c6b86faf5c3f0c7559002b7de6ab4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935786, "uuid": "fc4f280e-b6cc-489d-9afe-dd719a65b767", "comment": "Malware payload", "value": "22f1ff58f10a10e9cd1fe6fb9c227acc7abdc1d441bbfea3d3f191e01d388318", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935786, "uuid": "a4bbfebc-d272-4b7b-b705-42a98e72157e", "value": "T1F906122CE1027C33D56772BDB8A39212D721EB4D21D86D9264C65A2C0B4F6643F3AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935786, "uuid": "770335e6-8c93-4551-99c9-d99a885b6d57", "value": "98304:fhE57rmbTvA/DFxjtOR4hZ9/5jp9pFh/7rBD:ipQTY/xxjtrFp9pFh/BD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731935786, "uuid": "651c6aa4-5257-48d0-9954-b2af36a70f29", "value": 3934674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935786, "uuid": "434d5522-61f6-4f6c-9602-8229b51fa5cd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cde640d8-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731936425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936425, "uuid": "64639548-4fcd-41cb-ad4d-7f3c131ccf97", "comment": "Malware payload", "value": "ec59f33659d0f4d2b1cddc76d82c9556", "object_relation": "md5", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936425, "uuid": "ab80c1bd-7bf0-4000-9bed-fdc15f41ac65", "comment": "Malware payload", "value": "45d00dc1fa18402b7062f11116e11d0267a8abcf341893d66854bac17b2624ee", "object_relation": "sha256", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936425, "uuid": "ce3fea59-66d3-49ef-933f-7c0272dac363", "value": "T147412E5113E54322F2B22731A9B28032A63A3853B1C1E97D1013426F1473B545A89F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936425, "uuid": "bf4ed194-e70c-4161-b921-668f43bbe69a", "value": "24:8koHdFgrWncY6/wHcmBnR1E583nK5Cj+7S/TIU2JQvMcCvDxIU2SKs:8lUWcf0cc31K578EU2JYC6U2SK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731936425, "uuid": "f804d06f-0901-456a-a670-c677326f0a61", "value": 1930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936425, "uuid": "3cb5ce20-418d-4b51-a878-73f675184e62", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44436813-a5b2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731937053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937053, "uuid": "9762725b-9d0b-4780-bccb-2f0b61feaa6f", "comment": "Malware payload", "value": "5a1296a43a6bf4a27212421334433843", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937053, "uuid": "1f9bfc21-d8c7-4998-b485-ac00cb3f7d03", "comment": "Malware payload", "value": "6df7d3828784163f592c5805b0aac4033b8664240cdbed45fff9864e6e91be15", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937053, "uuid": "3aef26d8-2903-4229-b65a-467aedf22d44", "value": "T183B72392A38A0275D5A2FFFD618C0723B50DF549271DB25F247C11E0489E58B1EBBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937053, "uuid": "920503d1-ee3d-439c-9704-cabba4163d3a", "value": "786432:hADXXuC9mkLqH0C1SWvEWbW7ZhG0HQaocLeo0mGztdSxd8j+:ODngkLqHDxsbVh5waNLgl/md8j+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731937053, "uuid": "8370c651-ffeb-4f17-8aef-1fed8ca27df0", "value": 48680097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937053, "uuid": "a80afb54-7cfc-4314-b4e9-52e787dbdda6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a86f17c2-a3ad-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731938316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938316, "uuid": "9c229814-b76a-4662-8d0e-fdaacd9aa080", "comment": "Malware payload", "value": "abc72b65f9fa0336ea752bf4996021f9", "object_relation": "md5", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938316, "uuid": "cdba5bb1-bb6e-447b-acb8-3f066e2629fb", "comment": "Malware payload", "value": "fd29ba9cb9e7cc6a7f5ad5f98cb0164fd33cf4847965f9f95d5a33ac8afa5c6a", "object_relation": "sha256", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938316, "uuid": "302981d2-dd7f-4714-9d85-c052383b821c", "value": "T13B972396E78A0662C2E17FFC71AE472BB109B5482799626F143C05E0494E5CB0FF76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938316, "uuid": "0d33b9d1-1dea-4b49-b710-0c80c8fd583e", "value": "786432:CDXXuerfHkIZf06hLwbl9Pm2TW38ZF+oxwk4fbSep829C:CDnXfHkIZcXM2TdZooxwnXA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731938316, "uuid": "0ea37d22-d76c-47f8-9753-e065df165dee", "value": 42597473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938316, "uuid": "c532e510-f921-4273-94e6-d4040e69c70c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "350cedff-a5b5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731938316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938316, "uuid": "8491ec57-7ba4-4558-ad6e-f24ff9135252", "comment": "Malware payload", "value": "6b75c095a74a516d2609915371ea0fdd", "object_relation": "md5", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938316, "uuid": "8263ebf8-16d9-4048-8272-a54137ae04ee", "comment": "Malware payload", "value": "24af6655a18b5baa637f6bb77f527bd442f39178a413cafc3d45d70ee69f982e", "object_relation": "sha256", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938316, "uuid": "db20ed0a-0a0f-497d-96e9-b883e9333728", "value": "T12C972396E78A0662C1E17FFC71AE472BB109F5482399626F147C05E0498E58B0FF76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938316, "uuid": "0aa6237a-df0c-48a0-a41e-31f8e1e6c8a7", "value": "786432:CDXXuerfHkIZf06hLwbl9Pm2TW38ZF+oxwk4fbSep82H3:CDnXfHkIZcXM2TdZooxwnXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731938316, "uuid": "2dcd7528-a112-4a2a-934a-8ff8fb04dd3e", "value": 42506190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938316, "uuid": "53cf55e9-0c93-4592-a7c4-70638406b59d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f56637c-a5b6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731938763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938763, "uuid": "19a01844-fb50-4dd0-9300-ee9171d731b2", "comment": "Malware payload", "value": "4295dc5bfd59dbf86a921e03253b9a41", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938763, "uuid": "561c1fd7-925c-488b-9b74-0c2d74755b68", "comment": "Malware payload", "value": "c5651492578194652c1292093b6b8fe811561a3fc394c47598988e9be0321a58", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938763, "uuid": "198fcedb-1283-46a0-b8e6-c881f7f6a6fd", "value": "T16537BB8D0EB65EF8E225E40723616BA6E44D241FEF453B98F64D71AC9F04085FF9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938763, "uuid": "dbb9910d-26f2-4194-9382-2c504cd1be8a", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHF:Nu/MEdS9F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731938763, "uuid": "f78243f7-248d-4ef7-9685-cde0d638182d", "value": 22769121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938763, "uuid": "4e4b0112-073a-4b6a-b381-2b531dd58e41", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "912278b8-a5b6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731938900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938900, "uuid": "576fbbd0-fcde-43e2-9ca1-53cae416e857", "comment": "Malware payload", "value": "b1bf5b199fc0ecca60bf48b2eb7d58b0", "object_relation": "md5", "Tag": [ { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false }, { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938900, "uuid": "999d3ddc-15c6-435c-96b8-c9bef4066e16", "comment": "Malware payload", "value": "ccb698f9f946a0eb77a25a2ae1f0665ecae8bf145b8977f8d954422d162db59c", "object_relation": "sha256", "Tag": [ { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false }, { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938900, "uuid": "f1102dba-1489-472e-9def-238067916b34", "value": "T154C5F196B3A904F9E477827CC8960A0AE777785603819BCF03A486721F277D35E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938900, "uuid": "fa2dbb7a-14a2-41ab-8efb-8b482c5866b1", "value": "fb701bcb0f600ee01f4f529e1b3e9476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938900, "uuid": "e41bbcef-88bf-45cb-87b4-9f3239ed30b1", "value": "24576:PSqMZN8DPK8HqVh0lhSMXlYRdfw57PRlG0kRx0i5Cegju5XMR7ZERr:PS1Nn896E7139ju58R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731938900, "uuid": "04c4cb68-b17e-476f-ba0b-5aa50009cff7", "value": 2742272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938900, "uuid": "9c878fbd-5980-463a-a029-462e113f13ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a15e399e-a5b8-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731939787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939787, "uuid": "02a896c9-40a6-428a-8830-3e93377f5179", "comment": "Malware payload (LummaStealer)", "value": "3676ff6f583516d10ecac56298941ce6", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939787, "uuid": "0f5a3961-f66f-4856-b742-8bfb78be47cf", "comment": "Malware payload (LummaStealer)", "value": "847f22970216b8e19935230729e3ff5f2a2224f305edb621fb44f44bab0c0a13", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939787, "uuid": "d671406f-1ae2-4e0d-ae42-101e5fd5d9ee", "value": "T16685336BBC34D0F1C46457BA7FCEC6BAFF5D082874AA8E45815843F5B6A319833D68", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939787, "uuid": "f738a75a-9326-40d0-b1ff-19f6295b59bd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939787, "uuid": "3aa0db9d-3e16-4ca5-b005-7a83dd4cf61a", "value": "24576:73FeiFqu9ka+ow+bZHdRv8jteT6dVMtgTwBr4LTh/np0rRsGOcHo0R4eEdDzguwo:ZgZZowqZzvYjVt/LNgRxOcI0R4Dzx1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731939787, "uuid": "1f63b390-334e-400e-b622-dc33931f13d8", "value": 1834496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939787, "uuid": "87ea09fb-dde0-47b1-bdce-95188966660b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ba3921d-a5b9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731939992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939992, "uuid": "5fb9543a-a5d3-44d4-9509-b55f26ca37bb", "comment": "Malware payload", "value": "4a1a9a1c35ba847447579d394a33e736", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939992, "uuid": "83f43df2-3a90-4143-a9cb-736dd66fe26a", "comment": "Malware payload", "value": "877251eb31447e5361b49399252bb0a7023639e72ce39da14a2218e055d450f3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939992, "uuid": "299b8325-4fe1-4045-b6ba-1d65ace25cbb", "value": "T18456333BD4E45C1BAFBAC131E9D0E7D89F8042530FCB80BA4B51F45629527C4A77A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939992, "uuid": "5e3aac7a-175e-44e8-829e-292561f153b9", "value": "98304:c6XYExzKsm9aW+/1qTNGXbe5cF60B05iCGwJ1JP4vq3rs6g3jKLAIoPrVgaNkCd0:+ExzKs4t+NVLe5cF6PiCGw/JCq3rW3jK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731939992, "uuid": "07a619d2-83cc-4708-aaef-51def4f96755", "value": 5953526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939992, "uuid": "edd03459-3092-4777-87eb-7f194ac9ec84", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731941706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941706, "uuid": "7328e07d-f186-47a2-8c1f-6bb79a6c55aa", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941706, "uuid": "812e93f7-0fdf-48ec-8135-b5a8c62b3f79", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731941706, "uuid": "d70c08b3-8d79-4b1d-b009-dd9a5968ba91", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731941706, "uuid": "b6fc5045-6d99-4ca8-91fc-47c84fda34d9", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731941706, "uuid": "6bafe531-e8e6-4345-9a69-856f2156ae0f", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e96360-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731943385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943385, "uuid": "8197b415-74f6-4f1c-9f8f-365d763ccf3c", "comment": "Malware payload (Mirai)", "value": "c8a79cda97f5398387e62fa6e98666b0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943385, "uuid": "cf3eef3b-3e2f-4a26-afd4-235b9030df6f", "comment": "Malware payload (Mirai)", "value": "9865ef8da302ddc1e3a1da06117f8f076e9fd7ad11d87cfdfd0f0009d45457b5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943385, "uuid": "d5485e78-73e5-4990-aacf-6f6001553c34", "value": "T11C63B65D6E329FEDFBAC863047B34A20A798339527E1D684D29CC6002F7028D645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943385, "uuid": "d5161ce6-0e9d-470e-b4ef-7661a8d8a7f2", "value": "1536:ZEsl9zVBEBsM5JiJx32ln0jly5qT7eOBNlYu:ZzfzYBd5Ji332ln0jly5qTHNlb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731943385, "uuid": "9428829b-5cc2-4c9c-ab8b-e929bb399af2", "value": 68512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943385, "uuid": "30fa49a7-376a-41da-91a7-b0e05f746b0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3976176-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731944085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944085, "uuid": "7285d359-c7f6-4f28-a80d-0a8abbe35e16", "comment": "Malware payload (CredentialFlusher)", "value": "fa2b397967bb122bd57be0528765abbd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944085, "uuid": "d23672d9-9d6b-42ee-84de-70694c1b4fcb", "comment": "Malware payload (CredentialFlusher)", "value": "a7635253f2c47262d9f46682f31c22195260310263524c75965fa1e68a554fbe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944085, "uuid": "5d76b45b-7e5e-44c7-a21c-33e348902147", "value": "T142159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944085, "uuid": "06f52d0d-cf61-4921-92db-6ca540fc68e9", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944085, "uuid": "fbb60990-6ee2-48a7-9c62-6885c796b323", "value": "24576:hqDEvCTbMWu7rQYlBQcBiT6rprG8a+1e:hTvC/MTQYxsWR7a+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731944085, "uuid": "867ffd90-62d5-47e4-8110-8b0874e2280d", "value": 923136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944085, "uuid": "9d11b52b-c55e-49e7-bfc8-05c6bc83ae92", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33ea1ce0-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731944757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944757, "uuid": "b1cef858-ac26-4eb9-a227-b612220e6b1e", "comment": "Malware payload (RedLineStealer)", "value": "13f8c99aa760865c698e68697064378b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944757, "uuid": "50a13acb-655c-4e52-8887-16ea9eccdeee", "comment": "Malware payload (RedLineStealer)", "value": "89016656ba4266c2e04d564c450e8aec962639e4c94ef9ec0012d403aeec76f1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944757, "uuid": "cc74f2d9-efb6-4151-b25c-1ab63c0f66ab", "value": "T1D876338B77D4CC6CE5AA237092BB03A32A3AB86589E4C3D7538FC41D5DA03585E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944757, "uuid": "350f0d8c-12d4-4276-a1fe-1f98c36758bf", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944757, "uuid": "8af47b1c-85c3-45dc-b9c2-cac9c6a773b2", "value": "196608:0P5Q6Ku5QvSJvzC7/b7jemi5fZx7aXoUt:48umS4//jkfjYoq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731944757, "uuid": "331d603b-57ab-4f58-a5bf-0ba7489d2034", "value": 7393792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944757, "uuid": "8c3ebb54-7aba-4761-b5ae-8e6d82c9a7da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba3164b4-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1731944982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944982, "uuid": "1a0514af-0b78-4865-8b1e-7e28271a4e2c", "comment": "Malware payload (Socks5Systemz)", "value": "5e6a31c380ec68a2488f554efb111eac", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944982, "uuid": "121037c4-82db-4dc5-8cb5-23214ac6fd31", "comment": "Malware payload (Socks5Systemz)", "value": "75348cefa63eabc6e8395cfe4dc9bcb25b04a15b706e94d32dc391cb6be1d4b6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944982, "uuid": "ec254070-61b1-421d-b68f-782d3a221229", "value": "T1C7163377F5B18CB3F06EDAB50106CA26D93AD5536630A06D29ED8D798F134A10F23E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944982, "uuid": "43615552-b985-4029-b402-d2b5dea9b003", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944982, "uuid": "43f8bc39-23e8-43e5-a0df-f91eb0f1eb3f", "value": "98304:NHrAIqrX1fW3hCxuROpbWOzb85a+3pgCPEat4EM:t3qb1fW3gIRQf+nMaVM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731944982, "uuid": "484bd5a3-ec05-41b4-b723-64cdbde38284", "value": 4072089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944982, "uuid": "b3f068a1-bb63-46a6-8ab7-c16a92ae1986", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4689019f-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731946077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946077, "uuid": "44b1cb98-516c-4e6e-b440-051d6ed7f363", "comment": "Malware payload (LummaStealer)", "value": "aa1848a9a16aa15d7856a7026d49f19b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946077, "uuid": "8d8dd092-62c2-4e24-bf85-2bf43eefb79f", "comment": "Malware payload (LummaStealer)", "value": "10bbb6a485613807f9253ec55295429463fac355e39b1b450d7d88dcf98f1959", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946077, "uuid": "8cdb1e2a-0784-44bf-99e0-45d17710fd0c", "value": "T13C8533BA1EC29EF9CAEC17341EF781662ED1A443019B6A9B1574FC30907355FE29F2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946077, "uuid": "570bbdd4-01a5-490c-a574-48bf55d78c0f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946077, "uuid": "aba798b8-13ad-439a-bb18-c3b49a15eff6", "value": "49152:D+vZB99yKgx4nonwUsWp38Big8l0AGakRO/1cWqZjHN6X:DeZBryKglwUsENgf5p86JN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731946077, "uuid": "f7e3938e-dbe3-4477-9706-a8456ff1b49b", "value": 1839616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946077, "uuid": "b8537188-fe84-4a5e-befc-5e0203a5df3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "708b4072-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731946147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946147, "uuid": "313c4d25-81f7-4024-809e-690a9d96d8e5", "comment": "Malware payload (Mirai)", "value": "8bbcdfc52c503370151ec1e10d577335", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946147, "uuid": "d98cf50b-b2f8-462c-af5b-e7e62a4949ab", "comment": "Malware payload (Mirai)", "value": "230f2d5604dee541a05a8d1ac111615d7c2579c9cc472c0b79175ed0d75d56fc", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946147, "uuid": "ff011ec1-03dd-4e48-ad4c-29a3fe1bc1af", "value": "T1D8F2F841BC81CA13C5D412BBFB5E428D372623A8E2DF7307AD236F51778A86B0D675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946147, "uuid": "8eecfdc4-fb9b-43d4-8f43-edd0ad4254c1", "value": "384:SJls41tqJvZL9063ymdSUST8ahsQPjSf9xh0IsbmH26n6LKQrNgLHINXxyBnw0Z9:Yi418K+r+8MLPqKbi8NGwKT4Jx9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731946147, "uuid": "dae7f4a9-4e1d-4f6c-961f-0fccc8cee0a1", "value": 35184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946147, "uuid": "152a2931-8c66-4e7b-9f65-a492644c2ee7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6577c88-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731946264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946264, "uuid": "556470ca-850b-405a-b6f2-6de1971f27ef", "comment": "Malware payload", "value": "7fc74510e10b8c57308f71cc41f428c3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946264, "uuid": "018da9a3-825a-4ad0-ae98-c9e81f46a32d", "comment": "Malware payload", "value": "119130e1d19da23651394bad2470c1986120d735054ee5f4caaf652b8ed129ec", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946264, "uuid": "dd56fe4e-58a8-49d2-b7ff-89eea61d7db2", "value": "T106D2E0398BE78F5AD95E307D3F1E75DD7010930EE648ADE49BD46B3A4CA6F212A440", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946264, "uuid": "b37309d9-8c4f-4204-8f27-bdcc11c67e8f", "value": "768:LKNkRo43bpHlMyVj9FPwP9004AZ7LXOiz1sliKnbcuyD7UryqY:FxbpHlzj9FPwPx4cLXCnouy8mqY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731946264, "uuid": "5c8e63a8-d831-4453-b30c-2517469f538b", "value": 28876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946264, "uuid": "2f063dad-faa1-4002-881d-1224274c335d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "361643ce-a5c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731946908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946908, "uuid": "ee34d134-4576-4765-9d3f-0b22af98a657", "comment": "Malware payload (Healer)", "value": "822ad908ec906abc66ae85456932707b", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946908, "uuid": "ca4cde64-ff3f-430f-9d6e-964062230c85", "comment": "Malware payload (Healer)", "value": "2bef748917911cd5b07fe19b9d66b709829fe178051ebc46e6587f97ff6b84d1", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946908, "uuid": "ff56bf92-83f0-4a75-974c-90b41c1ea0f0", "value": "T1A4D53A92B50972CFDC8E1B78942BCD86685E43FA471444CFBC6C647ABD63CC215B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946908, "uuid": "60c360af-4b11-45e6-a0f7-7d2a3d27ed67", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946908, "uuid": "556067ff-a886-4681-b435-4ea4cd5cbd5f", "value": "49152:ST/uDhP5KZTlEZonRoUEwf0a0v9DFBCpPc553YvQeZQxGD:ST/uDtENCWRdEPFGE55IvXe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731946908, "uuid": "7793b696-1932-4d34-8ee0-0f433ee37be0", "value": 2797568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946908, "uuid": "62377d3b-932e-444b-9da0-f38997d4cb9f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0357dc6d-a5cc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731948111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948111, "uuid": "01067cc3-97f2-4e5e-aae1-481db82b87f1", "comment": "Malware payload", "value": "12b120a4476e10222b96520accefb010", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948111, "uuid": "af767843-eea7-4c17-ab0a-61ac8698b4ad", "comment": "Malware payload", "value": "5941e13681bde8d56abc5ac832dd651cbd54e35682869706a1571d7dff2bf27f", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948111, "uuid": "a0f792f0-9e7b-4b5c-b1db-4dfafd6bee1f", "value": "T18034D0E86962934C3BCAFD897AFE63D6A00789F08505CD14592147F8520DB8FFBCE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948111, "uuid": "1d44c06a-4897-4f7c-9497-f665d3f2253f", "value": "3072:1439g0gKh/R27IGmdIQE/kfJYpROQJ0xKh3yAgdgEN7sOwmPRKolGXhsy16Z:i3BccGumcBYpROQaOPg9FRPRKKASZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731948111, "uuid": "ec3b748d-9d63-4f99-8d9f-f9fa25ac797d", "value": 239694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948111, "uuid": "09203021-e093-4c1a-9852-e62ab07a11e8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "186fd9e6-a5cc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731948147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948147, "uuid": "41a392f3-9a2c-4f4e-8bbb-32458899c82c", "comment": "Malware payload", "value": "a3934723c8cf7d5b954eea9cb981d6a9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948147, "uuid": "97abac64-69f7-4f06-92f3-bd423e2cffe4", "comment": "Malware payload", "value": "247b2c7faeb891fd8589733a6320789e049b6a6d71bee5061196659113a99c44", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948147, "uuid": "d51cf2d3-7465-4199-a2f1-1e5502111398", "value": "T1BD22C0DA239426B0D75DC525B7664CC07298CFFEDD838D1198943EBA818BF883DB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948147, "uuid": "d0401a07-b721-45f4-b3c4-82df0735097c", "value": "192:+e9FkQkUkkknkvkPuOIJtK5R46yqHb1pd1KKodSkQkUkkknkvkBuOIJt4i6yqHbb:+e9FkQkUkkknkvkPuOIJtK5R46yqHb1E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731948147, "uuid": "e2c53056-f61c-485f-a874-5b5e721efbad", "value": 10746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948147, "uuid": "6f22542d-2208-4735-9b6e-510cdf85b349", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c3320c4-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731948309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948309, "uuid": "4b6c29fd-0f12-4872-a6a5-ba15d3ca3d79", "comment": "Malware payload", "value": "052a9ab111603beaf72cde5744bacb62", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948309, "uuid": "c3298bfa-e0be-4fc6-9ace-70313e23c7b4", "comment": "Malware payload", "value": "0c6549d98475dfbbb516b84774e05c0241505ab6c949bbf4890beba14a6579b9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948309, "uuid": "3809e075-23b4-4185-ac7f-35c0feed443c", "value": "9E0301D11321178C8365DB7939BE701A8538122B32E51E003D93A64EF64B715987BEBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948309, "uuid": "76b4e6ad-7875-4d28-b60d-26ea0c13e6b9", "value": "768:/kAKuobq1rduMGAXSEYEYv6DjbChaAUKvNvy0OQT23MTGE:87vbq1lGAXSEYQjbChaAU2yU23M1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731948309, "uuid": "7a6176af-4e78-4847-9fd8-70fcda6ef03e", "value": 40880, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d0548e7-a5cd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731948584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948584, "uuid": "f12774af-cd42-4df4-8265-396ed4f4460a", "comment": "Malware payload", "value": "58439543bab6bd3aa307e11cdcce7aa5", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948584, "uuid": "196a5e59-0fb4-4015-ade0-9147885c0b84", "comment": "Malware payload", "value": "603f0f74f6d8fc8900204b7fb153da14415e91933d793d9e744a77f7d9432200", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948584, "uuid": "6f6b33ad-4d80-4256-801c-0e578cce57b8", "value": "T1DC37BB8D0EB65EF8E225E40723616BA6E44D241FEF453B98F64D71AC9F04085FF9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948584, "uuid": "c409d89d-9543-4f93-93e2-f5a9ed2199c2", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHO:Nu/MEdS9O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731948584, "uuid": "9bdadcb6-a5c7-4a8d-b5e0-0707a1bfb462", "value": 22777232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948584, "uuid": "658be929-edc9-4b88-b5e6-77e87029d57a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1e5a1db-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731949747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949747, "uuid": "699002d9-db11-4c5e-bd65-f253e72ebc32", "comment": "Malware payload", "value": "57621ba8f7098f5aabea5927d157584e", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949747, "uuid": "54c4c7fc-f376-496a-91dd-ee7f1838bcb7", "comment": "Malware payload", "value": "085f8ff924593d06264831a945d2eeb937300c3d04d095c12fe804d5f29a616f", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949747, "uuid": "0625b563-e6ff-45cd-84c6-f2a3fd105300", "value": "T125542369D8D37883E7DC12EB20E9D17A910F50676A4338727B32CB658FD886411F9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949747, "uuid": "98ad5ed4-5fbe-4550-a2dd-eb9d2279c7eb", "value": "6144:a+lPc/hH0bNijXPXIzAnPgPoRuQC/iQC58vbbPk25jbzkS39HQoFh:Rk/t+4XPYUIPoRjn8vJ1bzTzh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731949747, "uuid": "5abab447-e4a8-491e-900a-338ab65e3311", "value": 290368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949747, "uuid": "1e34bdfb-bf80-4f48-bed2-fc788cf3201a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3034e097-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731950764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950764, "uuid": "d40ebdfc-6672-49d1-8047-860b09c4883f", "comment": "Malware payload (Mirai)", "value": "e68add6886cd37c7022259abf70858ea", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950764, "uuid": "d650e440-ac52-417b-b5f7-33655bb9ba4e", "comment": "Malware payload (Mirai)", "value": "b18cfd45f061065876f8926983f832395e4a2d9f6b5e1c2715643b93f1c4a8fa", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950764, "uuid": "3ab7786f-9df1-4a7a-942e-fbe81adaa0f7", "value": "T15823A5596E219FECF76D873947B78E20A38833D626E1D680E25CD9005E7034E645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950764, "uuid": "149797c1-4088-47b1-b8a5-ffd4f67465e8", "value": "768:pZrXHR1RHBbEjDogjDBoDe7ro/UpeE60JSXHLDhrSJHWEvXC95DGQW:/XrwjD1jDBoDe7k7DhCvXQ1GQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731950764, "uuid": "19f826d4-1e66-4d68-bf7a-2e949dc424f7", "value": 47164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950764, "uuid": "c17b43f5-ac0d-4702-b1ef-467fa9ca17fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94bc2630-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731950932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950932, "uuid": "07b2b454-ae4c-4b57-8256-d1480e92d34f", "comment": "Malware payload (MeduzaStealer)", "value": "42a5c60fadb3b94505babe3561507a50", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950932, "uuid": "734f21ec-f6dc-41a5-82b4-b015ac982e33", "comment": "Malware payload (MeduzaStealer)", "value": "a39cb2c31b6724eaa78f60fe29ced83e50ffad7e39efd604a7debdac63a2a80e", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950932, "uuid": "1c0a67bc-02cf-4902-b1a8-730a52295099", "value": "T1F916E067FD4065FED874903488970777A67BB480873287DB1698262A2E5BBD42F3BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950932, "uuid": "7bfb246f-7a9d-4908-a8cd-1b50ee7cb877", "value": "78c9da53bf2d072d61b49d02beb24690", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950932, "uuid": "e5620178-628b-495f-aa02-8d9d231da88e", "value": "49152:/xGK0l3e3ubXWCC5JJhZs0wFF2d1vJ2Z:/xGK09yuZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731950932, "uuid": "439252c6-20d6-42a8-adf1-d8f660bf4264", "value": 4270080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950932, "uuid": "89110289-58f7-48b1-82e8-6f033051094d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c49f5a95-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Loki)", "timestamp": 1731951013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951013, "uuid": "5d79f972-93d6-48be-9d87-34d2cb9161a6", "comment": "Malware payload (Loki)", "value": "a54bdd270a424ec79b735ef6b513c2e4", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951013, "uuid": "51d966cb-49f5-4487-9da5-0f3be9e4801f", "comment": "Malware payload (Loki)", "value": "dbcbb51e8c114fa8a7b9a1da2bbba100994eea4ed407bc338dedec5f811ade21", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "8b88fad2-a602-406f-981e-c1aa0099e85f", "value": "T15804D596DE301DDCB7CC0DA3B2FD71C9BA7C93ABA3DA0E6691AB3141D95831C90C04", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "a742a20b-e999-4d51-baeb-940202df8959", "value": "96:4vCl1722AAZtbZfjdDINnmScJXD65zbfKZ/UQ:4vCld22AAVjBIcyzbfyUQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951013, "uuid": "f7c680d1-a52c-4809-a3af-3c8d62990f9f", "value": 182364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "886d7609-d4d9-4721-86a9-4b1cca123285", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4d874e7-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951013, "uuid": "933645ab-3c22-4a11-a0cc-f8caf01341e5", "comment": "Malware payload", "value": "80358303e33cef71434e6e4a621262c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951013, "uuid": "29166103-0965-4e06-adac-a29a0054e3fa", "comment": "Malware payload", "value": "f3246d0ca5ca8e69f98ca33b2c17813d5d862049dcfa9931dbcbaaaf7543a1f7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "96025e1b-2035-4989-93bd-7ba754b3495c", "value": "T1AFC412B42BAA5332C2FF9AB7633432A487B5DD9B2562D38E4EC090D94B53F1255533", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "18216d6b-ef07-4ab2-a89d-b0e120e4deed", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "66f43e9a-9b35-4c49-98a9-eb915f95e1e8", "value": "12288:LUhTeWLn9xDFlYjueKNNuUlsrzwbxnmvGZiOveCdi:Pg9xDddNBxmvGZiOR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951013, "uuid": "7e7a36d2-fdfd-4a06-9439-1ab7ed68ac26", "value": 584192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951013, "uuid": "12dde71e-eea2-4358-97a5-c3e6173a426d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9042917-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Loki)", "timestamp": 1731951074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951074, "uuid": "b68e29fc-c2c9-4ecc-88fb-8975f19ff062", "comment": "Malware payload (Loki)", "value": "51ff32b18625da8e57f2b01773842cfe", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951074, "uuid": "2484a2ce-7217-4d22-ad16-e429631b6d07", "comment": "Malware payload (Loki)", "value": "b32a47004e6134879604cb3246c89b351bc5fb2547b1d87070846c5719951727", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951074, "uuid": "91ffa881-6d9d-47b0-8f01-4e574f13cdf0", "value": "T14C044BA5EA3048D9B7CC5E9BBEFCB79C3878835F4AD60E92935B3001DEA034D84855", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951074, "uuid": "b7b3fb48-9cbb-4413-abbb-370ce5e2b9e0", "value": "96:4vCl17nf2iLZ62iLqG4SPwYNf6hzhs2iL0Y5Q:4vCldnf2iLZ62iLISWs2iL0Y5Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951074, "uuid": "ff0cc71c-84b0-4e0b-81b8-cc6eb250265b", "value": 182394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951074, "uuid": "d6d928ae-b8aa-4416-bca7-ad7e2b12ec5f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e96170ed-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Loki)", "timestamp": 1731951074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951074, "uuid": "b02c3f93-fade-421e-a7f5-3ceb7cd1b315", "comment": "Malware payload (Loki)", "value": "e80a6dc30c45134e8c433ef07277022f", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951074, "uuid": "891cd2be-4bc6-4cbf-9324-a8a92e736ef2", "comment": "Malware payload (Loki)", "value": "11f9aa994a349d0b21caacb75e8b7198f1f52828628efd891aa7116b261e2182", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951074, "uuid": "268181e1-c6d6-41e1-91a0-22389e23b621", "value": "T14E04B668CE324DEDFBCC49A7BAFC75C872BC471797DA2E90465B7A02D88134C94C10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951074, "uuid": "b289cff3-2f32-48c3-b640-ca8a2a1b114f", "value": "96:4vCl17nlkfktbLVe4I9qWs5cew1WyNk6O5Q:4vCldn+s9he4CqWj26O5Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951074, "uuid": "34afa03b-6247-49ba-b0c7-73f3ac5a5fd8", "value": 182360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951074, "uuid": "5179fabd-1385-4b5f-9ea9-caca7675d6c2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e97b49cd-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Loki)", "timestamp": 1731951075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951075, "uuid": "f4dccb53-5a40-4215-b78c-a14362641167", "comment": "Malware payload (Loki)", "value": "8c34e99269d4121a0dfe4c3eaa9e269f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951075, "uuid": "840e1a60-bf28-499c-935b-f16e552bdff1", "comment": "Malware payload (Loki)", "value": "2899cb71414f7d46a6be0d40a5ba017d407a41f291154ea6a86f421754d11a76", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "a3892bb1-41d4-4b87-8d2e-e2893521dae6", "value": "T13DB4229037A9D563E0F9823620A4961803F2FA6A3756DBC80DC954CF95D2B407D33F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "4bd9b171-6101-4786-b497-eecdab02b70c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "8b245db4-8620-4892-8999-588a69ab63a7", "value": "12288:9rxg/s0yyjLeIKfjXx2qSuu4fU+0DPWxRv2JXXljznNS:Hgtj3KfjhxSuD0DSRv2JljxS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951075, "uuid": "9cfc4153-4b16-49e5-8f12-5eef01dd34b4", "value": 508928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "68eef2e1-a88f-492e-b3bb-cbd7fd429dec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e99a32a3-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Loki)", "timestamp": 1731951075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951075, "uuid": "dbfb93c7-9b30-4ea6-86a6-6fa5e0a03edb", "comment": "Malware payload (Loki)", "value": "318ff90d7a2797a041b836f7f8900f62", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951075, "uuid": "bf52e1db-e648-4d40-8946-52f5aaf67d26", "comment": "Malware payload (Loki)", "value": "241d0df35796a2c2ae0ae4af70ef9e6571c23536fef35c1c0c172d703203a430", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "87979201-a254-4bb6-a814-cf2361950682", "value": "T199C401A857AA4233CB7F99B7A73832984376DD5B2472D35E49C0A0ED8B43B15A1533", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "9c06f968-e065-457c-a643-5d7d104c6af4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "177d0801-ce09-420a-8492-8368c777e130", "value": "12288:3BCkWKcRnTtsjhTSRcPuvscz86hjioDH14q/x2gF1zE:JuKdOc2Xw6hOoDVVFe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951075, "uuid": "c897fda4-ca3f-447e-a6a9-bca01950d9b1", "value": 582144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951075, "uuid": "296d7ae0-6d8f-4c40-b632-f4f7c8b6fdc2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ec22153-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951137, "uuid": "07ed252f-3351-468b-b946-295e6e5275c0", "comment": "Malware payload", "value": "2dac334338c7f35705796030ce37679a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951137, "uuid": "0a17a769-f369-4f4b-b3b2-37c9faff7d8b", "comment": "Malware payload", "value": "0746bb62f964f73c203a6c4ec7cc8418edc39f158a62be266f480629796b22dd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951137, "uuid": "c0c0a381-7190-4402-84bb-cb92f7091c21", "value": "T15194AC8BC4C5186CA82D4598A1E22FFFADB228D783F53C7A451EBFEC74045B138929", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951137, "uuid": "b36e9a7e-8a30-4d8c-9979-7a9760f7037f", "value": "12288:2NUM+ezXkJo4xvsjda2o7i3I76YOdF2NYJnR:az+e0JdxUAnG306YOuaR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951137, "uuid": "93fed009-1cce-4281-adc3-28c82e2ecbe7", "value": 441624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951137, "uuid": "9c307145-fe1f-4ac7-a0bb-4c4b466243b4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ef08220-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951137, "uuid": "cbbd100d-09ba-42ce-8782-1d23db18cb29", "comment": "Malware payload", "value": "4b2f6049e023bb52b34267f4c4ee100b", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951137, "uuid": "bb511c6d-a05b-493b-9f08-ef961ed9374e", "comment": "Malware payload", "value": "f3b86a64407993798024f4d58c5b46370d4df0f5364f3357951067d74d8e9d93", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951137, "uuid": "e8f8c96e-8f31-41e9-b576-5c459d931ff0", "value": "T1B5A423A0287388EA25D17CE490E529F5F6E743AC86C680F5EC894E11E2738FF59BDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951137, "uuid": "c73f705a-2acc-4d9b-b09c-47126eb565f8", "value": "12288:XB+yZlHVWcpnjwoL6vc+mjpN/jaLU4FNyFOdHS:XB+i7fpjwoL6ktj3rmU4FNbxS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951137, "uuid": "04c58254-39b4-4625-997d-dcd12c86e8c9", "value": 493120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951137, "uuid": "338378ad-8b21-4dd1-a289-fdeb270310bd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30008bd3-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951193, "uuid": "3f90fd61-1e44-4b1c-b791-d791423ad09b", "comment": "Malware payload", "value": "6c23e5680c7a2466359fadc6fc86426f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951193, "uuid": "405becce-1f23-492d-b29d-50d4a62db51e", "comment": "Malware payload", "value": "b221584a56b2474d0048719469369d947f5e13f893d4e10db099ed06ba0b41b1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951193, "uuid": "4ea71c2f-8a6d-4368-af6c-20bf85fe44c0", "value": "T17BA49A79755B0F3AAE1A450CB4FB95C5AD62BBBF2D67A9CC2330C6C0085647170BE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951193, "uuid": "fd932d3a-2fd4-43c7-befd-7fa6c44fab67", "value": "12288:AsMAkdy5QM40mX8EWfoVT6pTR7n2nK14/S:9MiO906zh+xnUS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951193, "uuid": "d0c66a9f-a40b-4292-b8b0-983511dc8773", "value": 460172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951193, "uuid": "124d7498-26d9-4b14-bc67-39f13a7cc89e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32e5d4d5-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951198, "uuid": "4862c49f-445c-461f-8585-48a29634648b", "comment": "Malware payload", "value": "a4fd289fa4458dbb76e5242d2fe91cfe", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951198, "uuid": "26629fa4-b1df-4310-9019-315f16a5cd03", "comment": "Malware payload", "value": "6c24a94c0109d8f4a2947f38d2b557c4d21fee8f53978b4dc2ce6ec88fac67d1", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951198, "uuid": "152703e6-298a-4285-b191-3eacf94a294f", "value": "T17C5423D57AB2536FAF486048AD846365ADC8AB7C75C85E7EB12061E334FCB03642F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951198, "uuid": "090e6b91-3081-4823-a21a-fe005876c137", "value": "6144:XUcWaum/9eOiQK06TDfanp7gso8qd/vzs37TyyE8+Hs/m67H:1Waum/nWTDf8otETyyE8FR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951198, "uuid": "adb5af8d-8eac-4a42-a956-0b743e2c4fe5", "value": 287296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951198, "uuid": "45f202b5-f999-44e6-8547-4a2977c7ae95", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "516be6ba-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951249, "uuid": "5fb896ae-6fbd-4dd2-9a20-02e65b0eef4a", "comment": "Malware payload", "value": "05dcffe1d8e8e209a90b522192ad8000", "object_relation": "md5", "Tag": [ { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951249, "uuid": "4e6e05b0-2c2b-4921-a3b9-d5cd631db2ce", "comment": "Malware payload", "value": "35717c891450767af251ec90a7c05ffd407d7b2d2897d96c176c51b5b8a156b5", "object_relation": "sha256", "Tag": [ { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951249, "uuid": "4b2f97d1-f99e-4b83-a893-17ad52ae12c7", "value": "T149047C96EA3448DABBCC4E63BDFC739E3AB8275F62C60E95931B3412DD5039C58805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951249, "uuid": "9a1849fd-97e8-4559-a4f3-54da3ced827a", "value": "48:4vahW5oZz7eWLB2ZfywyQhhY1ywyQbD6ngS5RJCS0d399Dd5nCYmIYZAjo3ueufc:4vCl17ZtQjtQhVFlfnnCO4AjovtQX5Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951249, "uuid": "9d3234e1-19a1-4c02-b4ad-b2fa461fdb0c", "value": 182569, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951249, "uuid": "d4dbc80c-8b66-4505-ab09-4219c30d2989", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58a11dbd-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731951261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951261, "uuid": "d5b4c909-4970-4dd4-9bf0-b57da9dc6ed0", "comment": "Malware payload (MeduzaStealer)", "value": "c50f8f31c903a9f88b6bdec9b9f8962b", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951261, "uuid": "a79ab016-7411-49c1-a3d4-542f6f5243fc", "comment": "Malware payload (MeduzaStealer)", "value": "5c6985e002a60d821fd7b029b2c5d04c3ee16bb619999202f6dbdf432d229989", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951261, "uuid": "40ab72d9-a2b5-4549-9f3f-75921e7b3480", "value": "T1A516E067F94474FED874903489970777A63BB480873287DB1698222A6E5BBD42F3BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951261, "uuid": "c7ea59fc-bf37-43a9-88b9-6f7f84715aa2", "value": "78c9da53bf2d072d61b49d02beb24690", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951261, "uuid": "38734081-addf-41ed-9e2e-4c13a81f7d0d", "value": "49152:/xGK0l3e3ubtiuIv0ZVHnWmuQ5zrSmEvj1BZ:/xGK09yuQZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951261, "uuid": "02ab51cf-2ab3-4d64-a5f4-80c75f5b8081", "value": 4270080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951261, "uuid": "05256f13-c97f-4c69-aba3-f8f7267b65eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "273c8c66-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951608, "uuid": "468c60c2-1682-423e-a2cb-992398f80a0b", "comment": "Malware payload", "value": "fe3e563c64c5abc0ff6b2a2a65dd2bbd", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951608, "uuid": "03403b21-d920-4183-98aa-b6ffddde9394", "comment": "Malware payload", "value": "d1ab889f46786578609624c1f868a9fbe08c6b88f764c917a13645322aed087b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951608, "uuid": "89300b83-92fd-41c9-ac68-23f93db0a6f7", "value": "T165E2E0847B11DF52E71105732D9C6A9C49AAB7AA0B7B31718CF5FC8EC35615A088F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951608, "uuid": "2fb9912c-de91-4c50-93c4-5657472b65f2", "value": "768:pwkyTc9pHiGJ7bLxlpuYPW55oXnOsUkAtQ:pxpJNlEYvXndUtu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951608, "uuid": "35f46702-68d7-4169-9078-37e9ca5fea56", "value": 33280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951608, "uuid": "3c441262-f5c1-4b38-82bf-9aec0e4f5eba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29fb89af-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731951612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951612, "uuid": "124fd871-1dab-42bf-aac3-7a2e928df355", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "2e931fe3cf323cf5522fab90684e4689", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951612, "uuid": "f3370955-ade1-47b6-bfd3-461840c3a803", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "f21dd62cc96830c623ab7ad04ca3eb3f0435254316b1d705651a12bc1e41cbd5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951612, "uuid": "9ee48d5d-3456-40b5-b938-f48c2126fc97", "value": "T1C4C4E10162F16BD6F6B75F717E3A82E4263FB8EB9E35726D1010562F047E1A0CD62B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951612, "uuid": "cdef463b-1b77-45f6-a487-910588cacc7b", "value": "d85466b52f6e7ad407a16b9901f7362a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951612, "uuid": "30b83619-ebf7-4400-93bb-6dd0126af997", "value": "6144:emjGECB7Cp3jMoOzRv2K8Bzgzn33LEUOgJCM6sV9ow5JIZaom8v98culigy:e/7cwoAvcB0zrkgUM6QawMZanY3Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951612, "uuid": "069ccf25-81a1-43e2-a3c5-fd35e9398f23", "value": 568832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951612, "uuid": "96a9ebe9-9ec2-46d1-9940-51b6712e7e11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bdd83d6-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951642, "uuid": "5be92bd2-0548-45d7-9a02-ac4f2943c20a", "comment": "Malware payload", "value": "493c609183cf3c0c71e69d8aa500da20", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951642, "uuid": "006fa809-4d4b-425b-8884-56d8eab60601", "comment": "Malware payload", "value": "cbb3070a3e52fda0475c47a2cf46fc21a35ba141f64731b700deba69a2d0f218", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951642, "uuid": "1b25f833-8afc-47fa-906f-ea7db8d84644", "value": "T10E34E06E891D7B79D0291B4038C3D006F934251E0A8E7AF524DBAE469B26CD3CEDF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951642, "uuid": "2dfda811-33af-40ce-8759-7566b9e3fc0a", "value": "6144:x74S43J1WxJS/u+0Esuuom3iXqwldCh+QaL4ZyXegk6JTDbuA:O9yCu+nfm+ZmQk+XT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951642, "uuid": "4ba9ec73-2136-444f-a62a-0e9e8e5e2f47", "value": 247890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951642, "uuid": "dc5a9b95-707a-422d-bcc6-82a30f6a1f87", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e546890-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1731951727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951727, "uuid": "8d21f421-da12-4ae8-93f8-d75aa3125d1d", "comment": "Malware payload (AgentTesla)", "value": "60c2b16e2f32c9fa9161505329c30b3f", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951727, "uuid": "50f18823-4db4-4f1b-9aa0-4667c8047a25", "comment": "Malware payload (AgentTesla)", "value": "bf2c22ab49aa5ca1e9fbd848beeedebead9fc49dc11ddda466c7f2423bfee031", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951727, "uuid": "c8e427e6-597b-48f3-8f64-f5c88f767f82", "value": "T1C735BF1373DD8365C3B26273BA25B701AEBF782506A5F56B2FD4093DF920122521EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951727, "uuid": "3bc69672-629b-420b-9bff-ba4c549f504d", "value": "91d07a5e22681e70764519ae943a5883", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951727, "uuid": "aea260bd-b0fe-4e64-929e-ad711fd4ccf2", "value": "24576:dtb20pkaCqT5TBWgNQ7aeoWAbbEJAjN6A:OVg5tQ7aeHHJAB5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951727, "uuid": "99791324-bc37-41d2-a72a-8237545b2e14", "value": 1063936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951727, "uuid": "c06da29a-2e10-441a-a1af-26a0289b77ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c0bc8bd-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731951992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951992, "uuid": "f32e47e0-4117-4754-95c8-08245e315658", "comment": "Malware payload", "value": "632c9ff09b97e8002cb53634bdfa2494", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951992, "uuid": "b3d97085-8aad-4109-80af-a6ce7c04dc10", "comment": "Malware payload", "value": "2ec638d50d489d34a511f3eeba996f3f91d125ef0041b7d298bfdbb40939a787", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951992, "uuid": "05028a88-d68e-40f5-a35d-7985b15ab181", "value": "T1A51633183C9AA3DBD51E4F733E4FD95C112EDF96808B60F6471AE6E906137193AC27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951992, "uuid": "cecfda0e-9429-4012-8d19-a5aa6bbcf0e0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951992, "uuid": "bdfb3a2d-2241-426c-b58d-5e62afd3840f", "value": "98304:tnoQuM9d+IbNRgPBGMq+wEKQOkBY26AJ5UyEQi+ya540kP:uQuSNmxivQOke2nPcQi3a1kP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731951992, "uuid": "7905477b-c6db-4da9-b5cc-2f96a0e2444e", "value": 4362752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951992, "uuid": "6b631e24-dd7d-4f90-af1a-4f2258aa0206", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a71c7ad-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731952123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952123, "uuid": "0096f4be-01b2-4f25-b9f1-ff7d098ba581", "comment": "Malware payload (Healer)", "value": "fffcb8fb5e1456cbc71dd2b92b2946e4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952123, "uuid": "5bd2955e-ef60-44ef-a4bb-5c628a99e09c", "comment": "Malware payload (Healer)", "value": "2ec39341771a6a56490424838713433aeaa35eb2d0492b136b6f18ffc418c4fe", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952123, "uuid": "a77a3d26-8b44-4de6-ae1a-c3ca1b4f7acb", "value": "T1DBD56CA1BA0971CFD88E23789627CD86985D03B8571549DBEC2C74BA7D73CC322B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952123, "uuid": "d59826be-f306-4683-b4ea-4ee3d91569b7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952123, "uuid": "61421f56-08e7-4038-9acc-3c3c3c4e63f3", "value": "49152:FPEOJCx1+Zk9yHx+leYlh7h9+v+Ni5dboD:JEkCx1+u9Ox+lplhC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731952123, "uuid": "36f1de7f-7038-408b-99f1-201d016f207f", "value": 2772992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952123, "uuid": "cb72b7ca-b8b4-4a0f-a13d-9026df5ffb93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b720da14-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731952279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952279, "uuid": "9ff55d16-5dd0-4f2f-957e-1954b26cf332", "comment": "Malware payload", "value": "fd3be3a96faf2bd9045e325decf52da6", "object_relation": "md5", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952279, "uuid": "a5483cac-35d9-4ba3-990f-92e0e68ec400", "comment": "Malware payload", "value": "271e861b9779e5197ad95ff5a3876e2bc5651a773d41e4e87f9cbaa78ef5646b", "object_relation": "sha256", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952279, "uuid": "5ee3bb69-698a-461b-9eb9-77fee837b42d", "value": "T114C02B3362FDE4362C571DD1B600BC0E1219204018BBDBD18870C1F9C14008372119", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952279, "uuid": "13e2cf3d-7306-4acf-b308-fe024ff247a4", "value": "3:N8dHElMKKhmHEVZBgyGLERk9Ue1J38RqLYETGjWxJ9NDn:2FElLZHyiycVeeD3Hhj79NDn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731952279, "uuid": "2685f380-fbe0-499a-b40e-fe03f70b9b2a", "value": 142, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952279, "uuid": "dc127479-39ad-4f31-9297-09786f806da9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c43ab4-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731952672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952672, "uuid": "42beb8d0-0a47-4ad5-a1a0-5fce58b39de7", "comment": "Malware payload (MeduzaStealer)", "value": "b7810d0c1c94831ffef11223725bc9d1", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952672, "uuid": "311b5f13-e6c1-4e2b-b118-1f45239645e0", "comment": "Malware payload (MeduzaStealer)", "value": "48a5eb3b0d4d5b8c3b8ae32b638ee0b0b5fb1ce45bb4c30463d697720a136974", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952672, "uuid": "8ecb214b-52de-44f5-a522-51eaa0e3f7d9", "value": "T12716E067F94474FFD874903489970777A67BB480873287DB2698222A5E1BBD42F3AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952672, "uuid": "def5d9b8-be99-41c2-a1da-a8129f72430b", "value": "78c9da53bf2d072d61b49d02beb24690", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952672, "uuid": "6fc1b4d5-3d30-468d-96ee-19f6818f52d3", "value": "24576:8Smpzi3xGi50W+Zdel5ubFeROD+7QDtETt2eUTyFXnYsqWRp1EJ1yl9AbYM88cV/:/xGK0l3e3uhekD+StC2en90mVuy/VZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731952672, "uuid": "4060f3cc-0801-4087-b080-ce251f632bee", "value": 4270080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952672, "uuid": "cb57e67b-9f35-43be-9a27-844ecb04b77d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "567e825c-a5ca-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731952986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952986, "uuid": "8d07d05a-c538-457e-9f89-d54c8def7028", "comment": "Malware payload (MeduzaStealer)", "value": "5221d2214beb75529df68ac5f0106f4f", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952986, "uuid": "926257cd-8984-4895-8a13-3cbc9a62bca7", "comment": "Malware payload (MeduzaStealer)", "value": "d61985407f31d1fbba3aaf4e6d1e79c5fc79fa333879fd478a0ffb4d9476a04f", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952986, "uuid": "41aefd9d-179c-4ec5-8288-e100cc22b3a8", "value": "T1B716E067F94068FED870903489970777A67BB48183328BDB1694262A5E5BBD42F3FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952986, "uuid": "b31609b2-f8ec-4af4-8390-b378bea5d550", "value": "78c9da53bf2d072d61b49d02beb24690", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952986, "uuid": "ba65c528-1b3c-4fa3-bdf9-1cc8c609f7d3", "value": "24576:8Smpzi3xGi50W+Zdel5ubytHiZTRIZxUTt3dcnBnD1aAByTD9+akcFEbaWpUBsHI:/xGK0l3e3u3tgyKBnD0UxVGQ/heC/IZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731952986, "uuid": "4db86389-221c-463a-9037-7a9416eb2ab0", "value": 4270080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952986, "uuid": "bf5c46b6-3434-4203-acf4-98fe85a716b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16dfea3d-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731953298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953298, "uuid": "e81d1f3f-82e9-4a9e-aa76-2ea7ef4c0ee5", "comment": "Malware payload", "value": "32bc1c34fc33adec1a0d611019fbeb25", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953298, "uuid": "e9a727a4-a677-4ce0-bef3-24b534cc65c3", "comment": "Malware payload", "value": "fdb0ebad99f2f53c926803eec28da3ec387bcff1b1ee73db1fc0164afda95e67", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953298, "uuid": "381e71b3-855a-42ba-a8d4-11db62330b10", "value": "T14F22C1E537B0B1E05650994931F2DA8C63AD44829C9F6F7487481C3DC139E9B7FBAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953298, "uuid": "7fd449f2-7bf0-451e-b200-203f67bd3f38", "value": "192:mkseE7a8aEaSTPMOC97nT3eS+77l7N7aZdzmazzZz5zKEv75UcwagQW7BMBUBW79:TEGrTSTPMyf91aZdm3Rl2uWqpZUhVZp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731953298, "uuid": "305bb926-4229-484b-8ae5-333f5af6a476", "value": 10662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953298, "uuid": "edb358b4-af7e-451c-ab9f-7523d25c2086", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ed37aa-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1731953467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "01bc2505-eb3c-4d76-a2d5-6e896d33b4f1", "comment": "Malware payload (Mirai)", "value": "f33e3ad3d114f55dc0ead8f17c21153b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "e98eb53b-deb5-4b2e-a712-3f41f26c89f1", "comment": "Malware payload (Mirai)", "value": "21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953467, "uuid": "df9a346e-4268-40c1-9c58-52156bb2c4f1", "value": "C564C08AED00AF61E4D521B9FA5F034973634BACD3EAB111E6249B3437CA65B0F7B045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953467, "uuid": "2c1cd848-21c3-4c90-a0d1-3b3d82dd0cee", "value": "6144:2IIKXhZtL7jOTyIG87XTabE5wKSDP99zBa77oNsKqqfPqOJ:ZTj8w6TabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731953467, "uuid": "cda9e79c-560f-4aa9-b261-5fed874b1a4d", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e6b0a35-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731953526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953526, "uuid": "eed37f23-5f30-45eb-8043-b870d01218e6", "comment": "Malware payload (Mirai)", "value": "e0f68b51224f9638eea18f975767cdf5", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953526, "uuid": "0b433c98-2db1-4633-b8cc-881ae483c962", "comment": "Malware payload (Mirai)", "value": "6fa7c3c95724c0984565b709591a2b73f5715ac1d01e5494fb90a43beaf3091b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953526, "uuid": "06a51589-9a2d-42c2-8b90-e23fada912b8", "value": "T11983B8197E258F7EFB5D833887B78E119A5833D623B1D581E15CEE011EA038E641BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953526, "uuid": "ffcc285a-dd66-43e2-93ba-c5e91e035291", "value": "1536:/yxTUxTIz7vYqN4SkdNG+WQ5sDasJEaDOY:+dz73N4SuNG+0aGEeOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731953526, "uuid": "db4ee3fe-344a-4849-be97-4c1e08f6e2d6", "value": 80908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953526, "uuid": "9c542323-c123-46ac-918b-7d800ee41b72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8694f7a2-a5d9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731954704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954704, "uuid": "2f87f241-6862-46c1-95a1-09d9498a7719", "comment": "Malware payload (Healer)", "value": "15a42b881a64fc398b371ed89a85893d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954704, "uuid": "d2f8c536-95ef-479c-aeb2-7502e4976d55", "comment": "Malware payload (Healer)", "value": "78eba35b3b30407893682a1fb4717e53d05e2c1d9a88006f904adbdaedd9c57e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954704, "uuid": "60fa2e51-8a86-4e6f-b5d0-e976056a1312", "value": "T14AD55BD2B50671DFD49B26B89827CD865C6C03F94B1848D3B8ADB4BE7EA3DC015B9C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954704, "uuid": "1ab02e4a-a268-4529-9efc-d3050f77dc0c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954704, "uuid": "fc2d3d79-508b-4f53-9d91-e7b729121d6c", "value": "49152:VpOnf5aNp3U+Pk+Dw5Zqxp0cl5hzF3Ai+h68qDYp7Tzkvw:VpOnf5aNvPk+DoPcz5FQDpVov", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731954704, "uuid": "20b2381b-c3a0-48e4-8371-53798ca78e92", "value": 2840576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954704, "uuid": "d18a21d0-9e7a-4cbb-9f6f-9f8f6a912ca6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca06987b-a5e2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731957894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957894, "uuid": "75a1cb71-e587-4042-85ae-bff1d61e52e9", "comment": "Malware payload (Healer)", "value": "b88c844bf623b8dac6d76610452878d8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957894, "uuid": "e4228066-8645-426f-8785-b6ae386039c2", "comment": "Malware payload (Healer)", "value": "142e770fba99572a14821f9230e35e51278e667a49e23d2bc571fbb2946bcdd4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957894, "uuid": "df25e311-d066-405b-ab28-cac7a5b77ba4", "value": "T121D55B92A40971CFD48E13B4962BCE826A6D17B9473248CBDC2DB47A7D63CC715BAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957894, "uuid": "ecc7543c-651f-45f3-b489-b89dec0c8267", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957894, "uuid": "c28a9965-2675-4f9c-be57-5b30fe4306f9", "value": "49152:2guBH6ppu0VuUzGVfN35Z6lIrQe5k9KRAu:2guBHyHVu8GVfYleQeSgCu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731957894, "uuid": "69999575-3967-40ba-bcd0-d02a31df3ff8", "value": 2800640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957894, "uuid": "267c8250-9579-4c32-924a-db7369872d9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e8b8421-a5e4-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731958492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958492, "uuid": "9e7fa421-5b8c-4d30-b6b5-2d3ff473bb5b", "comment": "Malware payload (RedLineStealer)", "value": "035fbc3dfff57500fd46af1b596fddf6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958492, "uuid": "93e833b8-e3b0-4324-aa7e-db5b589a3784", "comment": "Malware payload (RedLineStealer)", "value": "bff3db0379dcdf76a479e969931592f6d37f85d03b8831628c5b49d90fcd4ef9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958492, "uuid": "bc2c797f-7f4e-42bf-b3a1-6f404e3896d5", "value": "T192763343B7F8A310F6386B791AF583971B23BE215728D24D8E4CB8CA0DA3255B5173", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958492, "uuid": "bb353b8f-b54b-4345-99f2-c150d0fe0159", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958492, "uuid": "4a691cdc-f3a1-41a0-abdb-130fd2cd2332", "value": "196608:vLc8l1j+HTDoAJO4yx9WkHq0SJDMAgAHksp9kFml:3/goAM4aHq0YMAEszk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731958492, "uuid": "aee73836-0ed2-4cff-a0ed-02c5dcce99b9", "value": 7478272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958492, "uuid": "852f537f-49ca-4d87-ab13-80511ee081fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7326fcf4-a5eb-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731961613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961613, "uuid": "ced4fcfe-c30d-4033-97b9-bdafe7aa6115", "comment": "Malware payload (RedLineStealer)", "value": "5d89b532a571cb51ea7df5d9ab113cde", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961613, "uuid": "61e80cf7-77c7-4c83-baf5-a029eea54439", "comment": "Malware payload (RedLineStealer)", "value": "cbfd142b1e08835648bb39d9bb3fe43a71f52f9d66eb9ac4848451bd899a7694", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961613, "uuid": "a9a15224-1e0a-42d3-9a53-e8ce4ace86b3", "value": "T149763395E1FC4C9BC9F0A7741CE490E35E39BCE48F720493361ADB49DDA09E5B4923", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961613, "uuid": "1c3d8653-29a1-4878-ba92-f9b082708a1c", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961613, "uuid": "2510c42a-ed24-40df-9b9c-caa8cc53e5cd", "value": "196608:EDZjX0wwZjg4y4CKXD1yTqT1cfFA727t/hDwKENrlA:EDFwryYXpyTqZhA/Z8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731961613, "uuid": "66ad984f-544e-400d-8524-757186df807c", "value": 7384576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961613, "uuid": "8985b737-3e1f-493e-9c26-a7912f36f953", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73a7d8cb-a5eb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731961614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961614, "uuid": "f1ffe518-a9b1-4d1f-8519-a355196b9aa3", "comment": "Malware payload (Mirai)", "value": "3af790a66fc5a66c7a678ef74c28ba05", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961614, "uuid": "d97bf094-ac18-4945-9100-a3374e59bba7", "comment": "Malware payload (Mirai)", "value": "a32b6243fd6d9b549e6018b68b90420caf2314435ced5e678bc0e3b7a00bc06a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961614, "uuid": "f69ed918-c11e-4b80-b662-a518b86ac36d", "value": "T1E4337DC7D643D4BCE9D200B12026A7B3C772EA2955AFEB66D358A931DC2393096173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961614, "uuid": "fe80ed48-496e-4ac7-8b4e-eea01b3d00fe", "value": "768:2K95PUoE2QZ+o0kyadQNHtiW3H7JdxT3ObxU+83KutatBWEK+d0amKGAQn/I/:VLy4kyamltrXRT3OlU4+anWELTmt/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731961614, "uuid": "9688c6d7-861b-4290-9dfd-cc447f945e25", "value": 50316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961614, "uuid": "f2b949de-f950-445e-b497-bbea9372b465", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86750aa3-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731962075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962075, "uuid": "a1fda7cb-6f25-46b7-8f6e-87e3b3042e60", "comment": "Malware payload (Stealc)", "value": "76827fde25839a637186f7fe5ae9a16f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962075, "uuid": "6b23666d-6b8a-4a8f-ab76-f91bc59e9eec", "comment": "Malware payload (Stealc)", "value": "4a72a777521ea5b75d7c3e32331ceb2ab870a25b2a64168fb3cfb16eb767c951", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962075, "uuid": "44b1d079-060a-4747-8edc-576c7074d193", "value": "T1C485334A5FE52868EB943F7FBF19C46792904415B4D7EB30828F30169B43B690FB8D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962075, "uuid": "702714a3-1fc9-4f05-a7a8-5495da043beb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962075, "uuid": "df2fa03b-0891-4b38-8148-cdcf7c33481f", "value": "49152:CKhsYPqtMwj2hm2UJUPXdFD0JD+48Rsdjih:CnrOUJYr2D+4+2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731962075, "uuid": "3c0f18ad-6c40-4cda-af2f-96b548171746", "value": 1788928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962075, "uuid": "2044745b-ac53-4688-87de-4682cb8610d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "762da3f8-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731962907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962907, "uuid": "75890399-defe-4a51-afd2-f02e08e321f5", "comment": "Malware payload (CredentialFlusher)", "value": "f2a69e8a8e25a98910c9485b68b9e39d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962907, "uuid": "99421558-2ccf-462c-864c-2cab66a42c20", "comment": "Malware payload (CredentialFlusher)", "value": "8cfc88d84ea2463b5942e2e30357260fbdb677d80d4c94f2d52f447ccb573e0a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962907, "uuid": "41be891f-197a-48a7-a3c0-95da2b80bd7c", "value": "T1F6159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962907, "uuid": "39d21d06-2e98-4445-b322-ce8c4e98ab14", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962907, "uuid": "793eadb1-32e5-478d-81bb-74ec35138ff6", "value": "12288:GqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaqTB:GqDEvCTbMWu7rQYlBQcBiT6rprG8a6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731962907, "uuid": "8e8154b7-aa44-48ec-a2bb-c7d0bf991cc5", "value": 922624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962907, "uuid": "e9992057-69cf-4408-8305-9a42b8662eaa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc3b3069-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731963454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963454, "uuid": "1522779e-a581-4363-8c25-74e1ece7d26a", "comment": "Malware payload", "value": "f2006633968602540210c2d8f4eeeef6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963454, "uuid": "f33972c4-b45f-4614-9cfc-fa0ccbf2e8b8", "comment": "Malware payload", "value": "ae46a3efe6f5e382620237990240185aa4e888a1550a9c07715e07560e1701a1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963454, "uuid": "526480be-77d5-47fa-a389-4b4c2307c3a2", "value": "T18322CCE931A4B1D1DB80C81536F4C80D32EA08A4AD8E6F6897A8185CD179ECE7F6DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963454, "uuid": "519dbf79-6805-4917-acc0-008c44d8d941", "value": "192:m6GO7EMqR7/L8XSXeXXz3jLnTCFt1eSNyQ33SeH7ma0J7DHoa/o/Y/zWC17s0PKi:5GRCg0GfYoCo96g0r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731963454, "uuid": "49be166e-13cd-4338-b073-cd401f0a06ce", "value": 10662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963454, "uuid": "3eb3f060-83c3-4a84-aa29-ebfa9df9a6e5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b4f048c-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731963480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963480, "uuid": "217d167b-c653-4b97-8d4c-d53e0f012da5", "comment": "Malware payload (Healer)", "value": "aac30885d28c52f21da49e1ca8f0b68a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963480, "uuid": "2831a683-0ba8-4ecb-8ae7-511cdc81cb4e", "comment": "Malware payload (Healer)", "value": "543281397bb30296334be6d97c0daadc2567827affd71ff1d811124b8b464cf9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963480, "uuid": "eedeb230-7e51-4482-97f1-a4d2f1324b13", "value": "T100D54AA2B54672CFD48F27B89567CE46AE5D03B9472059C3A86C647EBD73CC012F6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963480, "uuid": "a7060248-386b-4d00-9b00-2c35a1ac996d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963480, "uuid": "a8adc30e-bd4f-4b6b-b9a4-ace71b40d31b", "value": "49152:FR3pD35Ij07NL2Ik9tRDC7AzcqoJz6jc0iKu:FtpD3s07NLK/e7AzcZGAj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731963480, "uuid": "2d655fab-5310-4249-817a-a07ecdd3db20", "value": 2760704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963480, "uuid": "97dd72f2-53ea-43a1-8f90-76d888163aa2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0699eca-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731963488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963488, "uuid": "3f16f3f4-41cd-48a0-a44e-631d13c2affe", "comment": "Malware payload", "value": "a422b66c6ef7d8418580fac19752731e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963488, "uuid": "ebf4a573-c462-4bfd-8ab7-b2abfa7f2d2d", "comment": "Malware payload", "value": "62ae78268e5e6b2c2938f55694baa25e8362bd41878358939dde656b7a744f83", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963488, "uuid": "41d08072-ba43-416f-946c-126f7a8499d6", "value": "T1AF22BDD913D839A1DB888825B7748C8432DA0FF5ED825E585E98289CD24BECD7C75B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963488, "uuid": "81559740-0f07-4f7e-b4e0-5d0840a88088", "value": "192:AzRORFKFVtJ5ZzDzWC1S4VXzDzWCwqoRFm8:AzRORFoVf57VLoRF5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731963488, "uuid": "46f3190d-9016-4c83-ba05-0910e20043b7", "value": 10746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963488, "uuid": "ddc3f7e8-dfc2-47e3-a943-10f1bb54aebd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3dc5cf6-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "4cd7487c-5dca-412a-aa5e-74101644b3f0", "comment": "Malware payload (Mirai)", "value": "b98ed820d6241142a99e91c8088ddb4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "d8bbee8f-dcc2-4557-95a2-9caffb592170", "comment": "Malware payload (Mirai)", "value": "dc7dc196ad7460b3cc647cee9a0f719a677900ddd43c6a27b1b548162f5c3e00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "55347987-bad6-4919-b7c4-f65e9f9c132a", "value": "T1CA53E846B8918F11D5D462BBFE2E118D332263ACE2DFB2239D105F1067C792B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "0bca5249-5922-416b-9347-89234c452115", "value": "1536:4dnr6+KZbwEr3smrVWXk/ZaYaQTKLfIDi6b2PKWz5pG:pJZMi3HJpHlb2PKWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964809, "uuid": "6dfd1f12-cc1e-4934-a496-258a282bb57a", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "40321889-9f3c-4b7a-b53f-5b6a47922252", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3e776bd-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "cba37bb1-8c3e-48d9-90a7-cac23b4a12a7", "comment": "Malware payload (Mirai)", "value": "dca3d663fb079b6f4d3f263710dbedcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "afd08d31-152b-404f-a98f-e9b700853aa2", "comment": "Malware payload (Mirai)", "value": "1a0c0586b10271d4bea5d7a50c1e22e6af269360bcfc0ac573e0c00891138333", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "4688b901-cdb2-43a3-9159-8185cb4211ee", "value": "T1C6C33A06EA418B13C4D527BABAEF42493322D758D3EB730699185FB43F8775E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "be598c27-cf57-4871-bbcc-1dc635aff8db", "value": "3072:sRGq/kvyj0CH2rTCCehHSMRGI+QLyM/9Zk/:Tq/kvyjUrTCCeFSW+QGM/9Zk/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964809, "uuid": "1a7754a6-57b9-40a6-8943-d9e5f131f0dd", "value": 128031, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "8367949a-fb83-448b-ad1a-2b6b7e981f82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3efac0f-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "d4c880e7-649c-4656-bd17-9afac4b3c3cc", "comment": "Malware payload (Mirai)", "value": "7235c56660e400ce25810272d809605f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "7badf95d-9abc-4ec7-a3dc-f70d3178dcb9", "comment": "Malware payload (Mirai)", "value": "ddb6751c9914e2a610121fcd0df61ca931be6ac3703f84cebdffe879fb3deff2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "602f0dbb-5c2a-4cd6-ac8a-138422feaa0f", "value": "T1C1434A25ADBA2E16D0D4E57B21F74324B1F1129D39A4C62E7D630E8EFF146006B877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "9bd38a15-e329-4a4f-b749-045dd4fff576", "value": "1536:oOaJlRwSAn0oG0wa05fp0FbY2nMIRbIJO:LoEtPaD0Fs2MOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964809, "uuid": "ee43e9ac-b894-489d-8a62-034e3916bb5c", "value": 58436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "731ea349-69c0-4632-b01e-3854e5ffc247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3f10a5f-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "fa63b91f-c95e-46e3-a547-9affc14d489b", "comment": "Malware payload (Mirai)", "value": "298d6c849bbfda2623ad05f3970cfed9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "c9f7f46b-5822-439e-a70c-7d1a67f73698", "comment": "Malware payload (Mirai)", "value": "aef5c41b3be53e27d0fe41d3a81f43b1736565fb794e2ef3623b23bca45acdfa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "8b05a6b8-9a3a-4db4-bd18-2b521f245812", "value": "T19643195578929B12D9D49277FA6E02CC332663ECE1EF33139D221F10769691F0EAB3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "276e7dee-f510-46eb-a20c-d26cdcdb94c3", "value": "768:dy0zqplZebdDoROwQI+TOWl650m5OEblBMKuArj9FPhskOPN5WXC5BhA1rPNOL+T:tz8ydMcm59jThsk+/HJA3Zp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964809, "uuid": "e18a0308-bf56-4d42-bce5-6da878ff2d59", "value": 56044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "f9af16cd-d3e7-4eb6-8c6c-000c6dce69a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3f78641-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e451fa2d-139e-4624-a0ca-e254036c9593", "comment": "Malware payload (Mirai)", "value": "f8de01f4bd9c682f5d87c21b12c25cae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "2f261443-241a-419d-a062-350163d85161", "comment": "Malware payload (Mirai)", "value": "1071a8172b2717fbffc0463d2450500607c509b02b9b6b516924f7f3132a97d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "e6a11640-eed7-43d2-a548-e0cdfd5175cb", "value": "T10463950A3E318FBDFBACC63447B74E209659339526E1C584E19CEA015EB034D785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "c95457b1-a465-4412-8142-186e07269864", "value": "1536:BANTVhDuVi/JxMB4QqPrb3ChtRN5Okeuu/G7fin/3:eNTvDIEl9Db3ChtRnOUu/GLS3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964809, "uuid": "3128f696-35ed-4a1e-9f80-c67534b146e5", "value": 71528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "cabd58c9-d185-4f27-a254-6a97dac8ff79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e41c0369-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "46db7359-ea44-4b36-bc75-b9d836d02829", "comment": "Malware payload (Mirai)", "value": "ebaf13ff0a90b6fa0eed43cd178d0f88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "875e4a14-f1b5-4e26-8cc6-1a2232f78f8c", "comment": "Malware payload (Mirai)", "value": "01207a05e51619d65cca5fbf8c97e6f8878dd54a58427423cbdb824b9cd4d283", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "9d911a5d-17b3-46cc-a2e8-1364178b0a20", "value": "T1C22349C49643DAB5FC5185713477BB329736F07E302AEAD7E3865632E881702964B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "46264e67-b12f-4e6b-bb83-1b6a62de1b3a", "value": "1536:tZ9HZylQqsFvqDlVd3rrHq858hYiPVjy3XQNm9:VZyW/FvqDlVx/Hq8GhvV+3g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964809, "uuid": "317747fc-e4a2-4846-b5a8-93a6b4894505", "value": 50044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964809, "uuid": "d7238d5c-c308-46e0-90de-d733158eed8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05e24f06-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731964866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964866, "uuid": "bacf480d-e990-4bc3-bf50-559283548f26", "comment": "Malware payload (Mirai)", "value": "4c97f698ed8a7310c689bdd3e69881b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964866, "uuid": "26d2bc98-3007-48d6-a48e-659392b09115", "comment": "Malware payload (Mirai)", "value": "f41cf44f302c6595487d0fe01158a145808989549885691eafd96d307869cca5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964866, "uuid": "0134f688-6be0-41e5-892c-a7413effe26b", "value": "T14433280232280947F5569EF0393F0BF053BFE98529F5B2852A4FEA468635F331985F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964866, "uuid": "36ac64c7-24ec-48c2-8606-778d037d5f39", "value": "768:S+git3Pbc1U8O8+gECahRNFIndBfdGatrdj5jK+iVTrvrSXhBydE79yfXP:YS/bc1U8O8ZWOnZ9tzjKDjGX7eXn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731964866, "uuid": "5ce7d6ad-a43e-441f-8f14-38204f0dcf11", "value": 54180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964866, "uuid": "08d06049-2f28-4ae6-9a97-50fbbd5ee00b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c1ec7e4-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731965011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965011, "uuid": "cd72631c-06a7-44a4-898d-fa014f814885", "comment": "Malware payload", "value": "fffbc2154008a315997c008de0521a09", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965011, "uuid": "24699daa-1d5e-4710-a69c-2b21fc5969d6", "comment": "Malware payload", "value": "309718e08ae3aa6540b9e33bd71ac338915464c8c42301089865f09a78cf0aaf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965011, "uuid": "c69a0e58-6ec3-4b48-8e66-9bd39ee34539", "value": "T14617233EA287F0BDE00B3F727969D42E86F72D6721126E41D6F4D86EDE381641C2E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965011, "uuid": "f140fd90-b0fc-41a1-8d1d-b552a4424cf5", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965011, "uuid": "12e81a28-8b5c-45ba-9376-01bca725970c", "value": "393216:lqe5IBpq3/+47aeAVaK3/sQFEgMtpq/th1+0ytjJB:8eSBp5ORuX3/sEAM1ZytT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965011, "uuid": "c4ac4d0e-49ea-40b8-9e8d-6fc40c106f60", "value": 19319120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965011, "uuid": "80af6a69-5316-445c-9321-0931064645c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9ef61f1-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "cd454271-f89e-4dc0-82b2-94fb5a97b1d9", "comment": "Malware payload (Mirai)", "value": "e8a96a502ac064f61e1169d536ce59a0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "3aef16f1-b98d-452d-b115-6643df2c60b7", "comment": "Malware payload (Mirai)", "value": "bd474275fd0eb6cea2760e52f05a46c5fe82b98a73fcd79bdf1e3392034eaff9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965168, "uuid": "9fcc023e-62ba-4ca9-b2fb-f20d062bfac0", "value": "T150117FCE107A9488C8ADCDC7726D880CA644CAE0759CDF39A48DDAF67597D24FA49F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965168, "uuid": "3f224b5c-d29c-4b28-8ff3-006a49ad4588", "value": "12:xiVU2xCWEUANI9kxwAUJySKxWHUVyFUkPCUmoeVUC6UOxRI4qKAUzJeU/x7+cAU7:0mo5ANIqcxKxzBkmUa61xl1vIgaHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965168, "uuid": "dbc982cf-5a5b-4b2a-9563-1e61b457ea5a", "value": 1020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965168, "uuid": "cb511617-11ae-4e86-866a-1ae6e11aef78", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba1eeb35-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "72b5ee85-507e-4e6f-b9cf-6fe099976cf4", "comment": "Malware payload (Mirai)", "value": "992741d4972b7ef9121ffa86c1eee37e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "a8131881-c744-4a1c-9570-38d03a2df90f", "comment": "Malware payload (Mirai)", "value": "b3c35dbb1092eb527911b8f9f41bbad14b65a5ca2cd683d52c4c813d9f281aa8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965168, "uuid": "94501c04-4bcd-4f89-95e9-f14af5acf367", "value": "T198D32A06B30C0A47D2632EF43A3F67D093EF9AC121E4F640356FAA899172E365545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965168, "uuid": "976f50aa-0303-49ac-acc9-cb5f7ae0c80e", "value": "1536:a0nwryWvmn/qZIR/GSL98z+xpnvTnNoMfBIdegp7PMXgvAtId0DD2h/qvc8kpd/t:BWvmXOe8z+x57nBKeglPMVtQpdbRP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965168, "uuid": "b7eadd71-885b-48fd-be91-0fb692343477", "value": 132344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965168, "uuid": "8bea37f9-2c71-43f1-8ee5-ea04920d1319", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba801c69-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965169, "uuid": "2c9a8565-1da4-47ed-b8aa-716b4ceff3cb", "comment": "Malware payload (Mirai)", "value": "47f583f2ab88d8c8b3b8aa73650e5ff3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965169, "uuid": "f9e99166-d524-4b50-8297-168fd4516091", "comment": "Malware payload (Mirai)", "value": "6347ab961bc977f203ff10529d8865e5f9d0d1a7914b77bd0e1ea722a0f9850a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965169, "uuid": "7d99c738-ad3c-4ae3-83d2-6233bf2a01f8", "value": "T16104D81AAB550FBBCCAFDD3706E90B1139CC954B22A83B363674D528F54E50B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965169, "uuid": "e98a28c0-0720-4fc9-b518-57696a7f5496", "value": "3072:ueEksFM+wX5OUaVR8H3NaMZOTTMJxt9U+7fKbME:ueEnO+wXAVWdaMATwJHy+uI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965169, "uuid": "4a7551b3-6349-4b5b-9961-8943348aded0", "value": 177860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965169, "uuid": "465cde37-b996-4067-9f7f-332d17739dc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bac4907f-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965170, "uuid": "92cc6ac4-73d0-4c45-b0b9-881f2408b0d8", "comment": "Malware payload (Mirai)", "value": "f10ca5adcacce1845548947c8e7bf2b6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965170, "uuid": "35a12002-a70f-426b-952f-cfbd531b7c5f", "comment": "Malware payload (Mirai)", "value": "39a29ddba1c6614b1d52707efbe3d83e520c1669d22536104403a392528991a2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965170, "uuid": "82ac2dd9-af33-4c12-b122-1219994fdf00", "value": "T19BB35A77C8296F68C259D1B4B0B09F792F63A58182472FBE54A6C3B64083DCDF505B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965170, "uuid": "537304af-21b3-43b1-9b6c-1641ae090963", "value": "1536:+aVTHW/qIAmLqphHFGEWCRrK5KFvLTlvKiLzMJWdkTxeo4f/zC:+qWLGphlDWMO5mNvKC0WaTxkfbC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965170, "uuid": "1be2e980-3589-4c39-864c-a6f017c3bb77", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965170, "uuid": "19254205-e5c5-44ef-8706-2fb827246715", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b954bb68-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "801b059c-7c07-415e-93a4-f01d9f1bc1f0", "comment": "Malware payload (Mirai)", "value": "c7386c0e5466039c5d1d68e7cde27b20", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "c479536a-f563-48e7-ac00-51d76698fa26", "comment": "Malware payload (Mirai)", "value": "4876bb2c9b4f6d1cb3bcf4220b62d9169cb0adeedb05aeab260e1f20705677b9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965227, "uuid": "d2fb8169-aa1c-41d2-b338-7d35fc062deb", "value": "T114936CC5F683D4F5EC9705B1113BEB375B33F0B52029EA42C769A932ECA1510EA16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965227, "uuid": "9ca55880-93d7-4ebd-8df1-ef1be12a8736", "value": "1536:xpG2cWAcCghsZcWU3S83sStqU1gQI68jne8Fs8F2c/dw8SAwHEoSrtAjE0xZ:xpG3WrCEjWUiELZ98FIcK8SFk1IE0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965227, "uuid": "9897c070-4b98-4a48-ab50-c0267053b7e9", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965227, "uuid": "585f635b-4cab-4133-bdd5-012c2813f465", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcff3ce8-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965228, "uuid": "6993d2ca-e78e-4559-9388-1931b3e96902", "comment": "Malware payload (Mirai)", "value": "2316db1c5504f70bec933d97f2557593", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965228, "uuid": "01f13f5d-fd1e-4371-b9dc-7caea5ea4371", "comment": "Malware payload (Mirai)", "value": "0fa894e6105d33349879f601b225e4d9ba8be5ccbbb9adff9c8a1fdaaa3083b2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965228, "uuid": "bd485fe1-a316-4832-8b26-ae786237c9c6", "value": "T18CC31945FC405B13C6D212B7FB5E428D3B2A17A8D3EE72039D256F61378796B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965228, "uuid": "359a07ce-604e-483e-8052-4aea0429992c", "value": "1536:Jtv+s43G5bUWk8RA0Sh71QAFMxK4VIGUT2y1C1O/T0A46nrtplUuwyw1FrR7bVn1:Dv+XQ/Rjg71QNE43Uqy1C1O146rOgbP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965228, "uuid": "48392256-7d0c-49ac-869f-587b2140e0a2", "value": 129792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965228, "uuid": "dbcd07e0-6e5c-4585-ada4-f26508543eb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd369e08-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "c05a46f8-2488-4956-a6cc-d7ba799f962e", "comment": "Malware payload (Mirai)", "value": "d65cb7c219595793b094305c85e9dfc8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "ac5d07c9-3d6a-4d1e-9708-5cfca28585c0", "comment": "Malware payload (Mirai)", "value": "0035c75f2fa587d5293a2b06d4bcb21dab64d7feb69e623b5f148045bfe7b2d5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "9771740f-d11f-461c-89d4-a283ed3ad18d", "value": "T1E7D33A17B5C180FDC4DAC5B44F9EF53ADD32B1AC1238B16B2BD4AA221E4AE315F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "fb9246b9-3d16-4960-8bba-d7403670dc83", "value": "3072:tGtwnNiaOnUTWFKPT9OSQ7AOaogjV2iZlBWCgCiAkQPdL:tGtwnNiaOnUT8uLyqkQPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965229, "uuid": "4d5c352a-db6f-41b1-bea1-18a9100faaaa", "value": 139576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "e7aefebc-4747-4a9d-88f2-afd6243e2b7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de71e917-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "a472282d-b9d3-440c-8e63-44f6cba1f49e", "comment": "Malware payload (Mirai)", "value": "c43fe72a345edd8f6f7c0cc377c305e3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "4013f773-42d7-4675-b390-9b6f667c3468", "comment": "Malware payload (Mirai)", "value": "6c3065e3d5c13f5f9967be3fd7018aedceb3a2d8f99243850f7e0ecb0af2270f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "c78f23d3-41e1-4739-af9e-16bd6cca5d04", "value": "T1B8E329D7F800DEFAF80AE33748530905B630B7E245925B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "10572fbb-faa3-4e03-9b61-601dbf6b299b", "value": "3072:GuRsZSh04+TW7j2o/wjAR8claTVrjbihL3d2m7yyKwEW:fsPS1/oAllawL3d/yyxEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965229, "uuid": "041a63d2-2fc6-4ba2-bb71-1737b1ce6b5a", "value": 150496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "d7cc7dc2-5ae2-4947-b8bc-01959317a30d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de72e7dc-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "a4b11803-045a-4f4f-8e15-eeecacb9d30e", "comment": "Malware payload (Mirai)", "value": "cd9ce7fe78956fb68a4ea027964524a0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "ed8c035e-19bb-40b6-88e5-05f6180d5d54", "comment": "Malware payload (Mirai)", "value": "6ec298d1d91a931e17d50f79acd09ce27ac9fbca71309d3ac3f4bbd7645fd6ee", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "eacfed94-68a2-4c14-a48a-103e5120d452", "value": "T175042A46EA404B13C0D627B5FADF42453333AB9497EB73069528ABF43F8679E4F229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "980c68f1-8635-4190-aaa9-a1ee9117ee36", "value": "3072:HK/lc0BbBLHcBCkAabwdyqkkUbH/6EBpxO/hJjogM/RHyfqs:HK/NBLHElAabwdybkQ1BnO/XMgM/RHyz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965229, "uuid": "c3748f35-5678-437b-b80d-84be19cc5c66", "value": 179805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965229, "uuid": "87d91204-6ca1-4b60-9af2-ec87884b7de0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9eca023-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731965285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965285, "uuid": "2a13e2ea-53e6-4119-90ed-d35468c82d31", "comment": "Malware payload (Mirai)", "value": "b53899e5e5a026b2a57a9383eef81831", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965285, "uuid": "fca521f2-4be3-41ec-a4de-dc8fddf17bfa", "comment": "Malware payload (Mirai)", "value": "e96fd33c4335b3f8cff92208f29f383f04c39fa3f212782c3625c7e2dcba78ba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965285, "uuid": "8ce3695b-b9f2-4692-b485-6e10ebe3e35f", "value": "T1D6116ACD5036948DC02DCDC7726D090C9745CBD0B5ACDF35A8959AB7689BA00FA5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965285, "uuid": "9561df02-1a7b-4cc9-8414-0c3679a4220b", "value": "12:XiV+lxCWE+9NI9kxwA+OySKxWH+cyF+9PC+7oeV+p6+DxRI4qKA+sJe+yx7+cA+v:y0DNIqfKxCo1xqHwxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965285, "uuid": "d5275b7a-e898-40b2-9151-bdf1a902c461", "value": 910, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965285, "uuid": "c7e71b0c-c892-416d-b2a5-9bdf80d4a400", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65f34dd3-825a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731965649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965649, "uuid": "f70d4041-eb23-46e9-a256-79febdc58654", "comment": "Malware payload", "value": "9bb1cbab607d6bc9edbe8e5d75d59ae0", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965649, "uuid": "97db2c76-fddd-4c96-8282-6bd4b7afa8c3", "comment": "Malware payload", "value": "73dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965649, "uuid": "97eda95a-b019-4627-ab32-1435b5c91c8b", "value": "T1A6D183F3548A6C9F963A0DA4E50863554DAC5E0B96EC807B6F889BB508EE0144CEA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965649, "uuid": "f864d9b0-00b5-478d-8c53-487b524bd4fa", "value": "96:YniHRdPqB/d64r05DhjDEP1098Xh3eDnERRB+6vaiFwmgNAr/M4:YiOJd6T+3Xh3uEHCQM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965649, "uuid": "717f63e3-e73f-4e55-93e9-0d293580ebaf", "value": 6176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965649, "uuid": "95e23af2-8072-49c2-973c-ebcbd32674b4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fd5e497-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731965983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965983, "uuid": "ec591569-c4b8-42d4-8be3-8a4b1c04c765", "comment": "Malware payload", "value": "bb1c7286c327eafc7cf6a21492cdfa0f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965983, "uuid": "54f0677b-5bf5-4208-b047-de35194e37c1", "comment": "Malware payload", "value": "8ac63cd639f78b172efc3c4cfecbe7dae3cd7f3dc245d31476187b0517c1babd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965983, "uuid": "f2010c4b-df3e-4bf4-b0ac-b7dd7942ff5e", "value": "T14A873353754ABAAFD0AE1274C423CD11A53F6FF099194C1BF9D8783C9F36C81160A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965983, "uuid": "3d5fd3f0-2fc9-44b3-b9ae-a246a45bb447", "value": "25fdfeb72f9d8c6c3fcea46af42b3f09", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965983, "uuid": "ed51cb76-0426-4c39-b68f-d10ae330d776", "value": "786432:npmGxqs8IFPB/4vQiZYgVcNioTjAHaUUfC+TDNED:n8bGJQvCgVxcj4zaC+TZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731965983, "uuid": "09879f9d-6a45-4642-bd27-1bf4a0d436d4", "value": 37624498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965983, "uuid": "726ba047-3661-4618-9b0b-357eccd79147", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19fec28e-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731968765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968765, "uuid": "cddb40f4-12f2-42b4-a91e-877d26134849", "comment": "Malware payload", "value": "e1aad757dfacc743077c8e5f4502f65c", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968765, "uuid": "789e74c1-c9fe-4feb-9967-27a285be7218", "comment": "Malware payload", "value": "3ad8c88d84d5321bbb6dd6f8fb5b2cff5b8a57dad4c93077270187b2e9ada8c2", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968765, "uuid": "a1f943f7-332b-45b2-9785-f971fdae6696", "value": "T1601633FEA871605AD94487B555FD45FF3DB2A39EA0E560493CC406C92C890EABECC3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968765, "uuid": "f8d3c8a2-def1-4538-b980-fab4623dc3c8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968765, "uuid": "c5078cb5-f643-4f4c-a7e4-b7ea4b73dc3b", "value": "98304:RCXPFJGUfvAltWbSQeATJI2Q6bEg7aOXkkR3iOJ3KFa+X+f1+d12TmFGHFAT:QPiUnArWb5eATG4Ag7lwsKFajN+j2TTa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731968765, "uuid": "a34b7966-6e1c-4a38-bfed-52853ce462e9", "value": 4412928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968765, "uuid": "d9f1351b-ccdb-47ce-9a7a-590d3905e9cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888007, "uuid": "125ada25-a540-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.152.240:42060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888008, "uuid": "12b45966-a540-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.56.233:58780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888261, "uuid": "a9dab657-a540-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.243.33:46833/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888455, "uuid": "1d310e50-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.112.55:35431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888487, "uuid": "3042e388-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.207.48:44028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888514, "uuid": "40b57a5d-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.15.119:42022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888610, "uuid": "79bbb28f-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.180.108:39120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888666, "uuid": "9adbcdbe-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.169.107:41101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888683, "uuid": "a54ddf47-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.88:34255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888726, "uuid": "bf184377-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.27.41:42757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888785, "uuid": "e226590c-a541-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.186.97:54462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888846, "uuid": "064f54af-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.16.172:41775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888847, "uuid": "0712bd00-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.105.97:34220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888866, "uuid": "12940a62-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.114.222:43251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731888966, "uuid": "4e17d24c-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.201.129:51850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889147, "uuid": "b9ba5f1d-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.106:46382/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889150, "uuid": "bb50f54c-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.40.98:40357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889209, "uuid": "dee81daf-a542-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.54.222:54156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889275, "uuid": "05df07be-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.115:45748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889411, "uuid": "56fe3cf8-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.194:59342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889447, "uuid": "6c54b6c9-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.111.55:3588/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889462, "uuid": "7551fb0a-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.207.48:44028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889507, "uuid": "909113be-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.56.233:58780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889508, "uuid": "90eedac3-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.101.185:37592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889685, "uuid": "faa215d9-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.62:34774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889686, "uuid": "faf80b88-a543-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.123.54:37560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889745, "uuid": "1e30ab6b-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.196.157:48707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889928, "uuid": "8b2fddd6-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.101.185:37592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889986, "uuid": "ad9e9731-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.62:34774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731889988, "uuid": "af44013b-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.154.233:40491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890047, "uuid": "d22b1bda-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://cms.events.socalpocis.org/merchantServices", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890047, "uuid": "d22b5729-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://8cdf8.language.sebtomato.com/viewProfile", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890049, "uuid": "d3b12cd8-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.243.225.88:4950/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890066, "uuid": "dd7c7515-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.69:58636/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890109, "uuid": "f6fecead-a544-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.234.216:41429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890166, "uuid": "19703111-a545-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.180.108:39120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890286, "uuid": "60bb8ae3-a545-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.40.98:40357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890345, "uuid": "8412bbaf-a545-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.73.78:34469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890388, "uuid": "9d753e55-a545-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.39:40931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890825, "uuid": "a220d1c9-a546-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.88:34255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731890886, "uuid": "c67e9b1d-a546-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.194:59342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891015, "uuid": "134d3e84-a547-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.236.84:34169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891128, "uuid": "5656f209-a547-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.141.181:53080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891185, "uuid": "787c8d1d-a547-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.157.159:45144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891245, "uuid": "9c5b2a78-a547-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.157.159:45144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891307, "uuid": "c1155633-a547-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.193.143:56342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891426, "uuid": "07e2219c-a548-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.107:43699/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891487, "uuid": "2c722d62-a548-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.173.36:44393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891500, "uuid": "3457c1dd-a548-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.39.181:55768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891546, "uuid": "4f68dd33-a548-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.179:47808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731891847, "uuid": "03129f3c-a549-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.62.188:50542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892087, "uuid": "91ecf696-a549-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.37.54:34294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892325, "uuid": "2007e47f-a54a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.91:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892385, "uuid": "43da98a4-a54a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.99.248:52462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892388, "uuid": "454f4e3a-a54a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.196.80:39179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892507, "uuid": "8c50447e-a54a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.34:33432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892643, "uuid": "ddc0c3c6-a54a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.149.19:59856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892687, "uuid": "f80fffa9-a54a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.245.253:53128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892748, "uuid": "1bff728e-a54b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.203:60736/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892748, "uuid": "1c3471a4-a54b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.134.171.36:54002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892822, "uuid": "483a5243-a54b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.103.42:49292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731892866, "uuid": "623bfc5e-a54b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:55587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893046, "uuid": "cd94007e-a54b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.119.180:56445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893166, "uuid": "1503d300-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.234:55807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893411, "uuid": "a791232d-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.234:55807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893412, "uuid": "a7acb500-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.140.194.207:54749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893432, "uuid": "b4208b50-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.147.30:57556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893470, "uuid": "ca8a3086-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.179:47808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893472, "uuid": "cbc78690-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.160.73:46269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893535, "uuid": "f1822125-a54c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.75:40083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893648, "uuid": "344956c7-a54d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.89.107:44456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893766, "uuid": "7b237bb6-a54d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.83.38:56544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731893885, "uuid": "c1f832ab-a54d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:55587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894203, "uuid": "7f3c9155-a54e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.213.150:34479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894246, "uuid": "994a8e37-a54e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.141.185:47213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894365, "uuid": "e0010289-a54e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.103.42:49292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894487, "uuid": "289f12ee-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.35.20:57834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894487, "uuid": "28b5b5c8-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.168.244.9:31245/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894489, "uuid": "29a40ec0-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.243.38:42018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894546, "uuid": "4bd4ecc3-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.18.139:52667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894547, "uuid": "4c219c88-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.230:34901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894547, "uuid": "4c28822b-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.216:60330/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894547, "uuid": "4c33f04a-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.200.213:34662/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894561, "uuid": "54d7d104-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.20.211:33915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894664, "uuid": "92595e1a-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.34:33432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894846, "uuid": "fea92de1-a54f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.99.248:52462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731894907, "uuid": "2337beeb-a550-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.192.50:57802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895029, "uuid": "6ba324ca-a550-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.231.165.62:52085/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895086, "uuid": "8d78b1ac-a550-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.125.28:37491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895209, "uuid": "d6dcbbcf-a550-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.89.107:44456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895270, "uuid": "fb54b5e4-a550-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.92.60:43481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895507, "uuid": "88b72a8d-a551-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.213.150:34479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895584, "uuid": "b64cd6a9-a551-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.36:34540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895644, "uuid": "da4e0fcb-a551-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.64:60568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895688, "uuid": "f45f5d1b-a551-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.211.99:60491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895748, "uuid": "1840f5e0-a552-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.228.139:58789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895810, "uuid": "3d3ab449-a552-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.161.132:38294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731895864, "uuid": "5d59d52d-a552-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.211:57996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896108, "uuid": "eef3c443-a552-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.18.139:52667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896167, "uuid": "123cee8a-a553-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.92.60:43481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896226, "uuid": "355a0d5f-a553-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.75:50681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896227, "uuid": "358b572d-a553-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.149.199:54372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896467, "uuid": "c52021d4-a553-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.254.216:48398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896468, "uuid": "c55ec8de-a553-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.232.167:41680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896528, "uuid": "e8ee9eba-a553-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.64:60568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896710, "uuid": "5573ac5a-a554-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.189:36884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896833, "uuid": "9f1736b4-a554-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.87.239:54141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896947, "uuid": "e2f079f3-a554-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.10.52:53185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731896963, "uuid": "ec48d31c-a554-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.186.99:57479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897014, "uuid": "0acd9406-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.127:10248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897072, "uuid": "2d5a6eaf-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.109.147.56:58318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897137, "uuid": "54329fc0-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.141.181:53080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897197, "uuid": "77a9bb25-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.161.132:38294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897255, "uuid": "9a3d8e39-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:50533/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897255, "uuid": "9a6b86a0-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.182.248:36653/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897256, "uuid": "9af12169-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://mbw.events.socalpocis.org/merchantServices", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897269, "uuid": "a30237c9-a555-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.176.93:44343/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897770, "uuid": "cd967968-a556-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.7:57953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897845, "uuid": "fa4df261-a556-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.109.147.56:58318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897846, "uuid": "faae7488-a556-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.128.69:37753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731897967, "uuid": "4314ca3d-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.82.226.202:37432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898086, "uuid": "8a0e50a9-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.167:60188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898147, "uuid": "ae2211fe-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.157.6:51027/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898148, "uuid": "aeb6de58-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.74.13.174:34187/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898148, "uuid": "aebdfbb3-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.166.210.252:43682/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898209, "uuid": "d2f6ea87-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.186.99:57479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898266, "uuid": "f4f692a5-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.189:36884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898267, "uuid": "f5b31cac-a557-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.96.36:39458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898387, "uuid": "3d787e36-a558-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.103.67:49007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898445, "uuid": "600018e0-a558-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.199.146:48436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898508, "uuid": "8559132f-a558-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.211.137:47225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898508, "uuid": "8561bf93-a558-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.189.80:41605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898687, "uuid": "efda2985-a558-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.96.36:39458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898827, "uuid": "435047f1-a559-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.182.31:38405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731898927, "uuid": "7efae1e6-a559-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.128.214:45232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899108, "uuid": "eacb277f-a559-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.7:57953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899167, "uuid": "0e01046f-a55a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.194.169:38049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899586, "uuid": "07d24d08-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.75:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899586, "uuid": "08102e6e-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.187.64:60964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899586, "uuid": "08187414-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.196.227:55390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899709, "uuid": "51380c88-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.189.80:41605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899786, "uuid": "7f0ab58c-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.22.115:60407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899826, "uuid": "971dff98-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.213.69.62:57353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899938, "uuid": "d9c6849a-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.26.81.68:43675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899946, "uuid": "de990f4a-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.198.24:57170/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731899946, "uuid": "dea4244a-a55b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.232.195:41639/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900066, "uuid": "264c467c-a55c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.237.6:33134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900127, "uuid": "4a2d73a6-a55c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.140.194.207:54749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900366, "uuid": "d90ff7dd-a55c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.83.38:56544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900367, "uuid": "d97133a6-a55c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.218.243:46343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900434, "uuid": "013f7677-a55d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.161.229:39105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900505, "uuid": "2bb377cb-a55d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.162:57392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900611, "uuid": "6affb8eb-a55d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.187.64:60964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900612, "uuid": "6b9d77c0-a55d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.1:40797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900734, "uuid": "b451f341-a55d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.8.109.85:50800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900791, "uuid": "d6631055-a55d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.196.227:55390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731900910, "uuid": "1d14cf7d-a55e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.9.152:33156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901027, "uuid": "62b2a326-a55e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.92:41421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901266, "uuid": "f1585a8e-a55e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.176.93:44343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901325, "uuid": "1498c2be-a55f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.116.187:50014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901386, "uuid": "38b41e13-a55f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.128.69:37753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901445, "uuid": "5c3cfc9d-a55f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.71.186:38930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901746, "uuid": "0f4b2738-a560-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.208.191.250:60389/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901761, "uuid": "181c213d-a560-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.191.132:52099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731901808, "uuid": "343ea857-a560-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.218.243:46343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902234, "uuid": "3283b138-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.123:59251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902286, "uuid": "5158c2f0-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.251.19:45415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902346, "uuid": "74fca66c-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.140.154:57598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902347, "uuid": "754a9886-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.78.171:55710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902409, "uuid": "9a718a05-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.9.152:33156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902469, "uuid": "be24062c-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Noureddine-nt9/rgsdr/raw/refs/heads/main/cheet.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902476, "uuid": "c2b29bf2-a561-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.227.124:37403/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902708, "uuid": "4cb6ef86-a562-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.92:41421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902766, "uuid": "6f32ee77-a562-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.118.237:50622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731902886, "uuid": "b69c2c44-a562-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.123:59251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903008, "uuid": "ffd43785-a562-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.92.86:50962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903010, "uuid": "0084c135-a563-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.11.36:11617/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903126, "uuid": "45ddccbd-a563-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.140.154:57598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903186, "uuid": "69b44614-a563-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.170.108:47662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903188, "uuid": "6abedaba-a563-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.8.109.85:50800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903246, "uuid": "8d64feac-a563-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.224.170:48221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903486, "uuid": "1c72bd71-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.216.30.14:60561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903547, "uuid": "40ca9216-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.8.204:42726/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903547, "uuid": "40d9d8ac-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.176.93:44343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903551, "uuid": "4303e8ed-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.138.166:37425/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903608, "uuid": "65290f14-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.108.132:50646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903726, "uuid": "abbcd778-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.98:55289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903786, "uuid": "cf0d2d27-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.78.171:55710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903846, "uuid": "f2ed71c6-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.216.30.14:60561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731903846, "uuid": "f32d8d51-a564-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.196.211:54400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904213, "uuid": "ce063f39-a565-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.124.31:40495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904388, "uuid": "363d27d1-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.59.80:50819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904447, "uuid": "596446f9-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.118.237:50622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904448, "uuid": "59d298ae-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.183.204:58367/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904460, "uuid": "60e9a3ec-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.241:33473/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904470, "uuid": "66d735ee-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.64.244:37511/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904512, "uuid": "801adaf5-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.55.167:50943/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904626, "uuid": "c423b7ef-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.92.86:50962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904686, "uuid": "e78d0047-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.198.4:59446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904686, "uuid": "e7f4cb76-a566-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.16.97:61472/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904746, "uuid": "0bbae3f5-a567-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.98:55289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731904769, "uuid": "18f13382-a567-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.137:44922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905132, "uuid": "f1b8866e-a567-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.20.79:40204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905286, "uuid": "4d427448-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.161:56067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905346, "uuid": "71468095-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.132:37193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905348, "uuid": "720eee7f-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.109.9:57847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905349, "uuid": "72de1c03-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.156.239:54834/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905408, "uuid": "95f50624-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.84:50223/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905409, "uuid": "96994367-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.124.31:40495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905418, "uuid": "9c193e26-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.254:54592/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905427, "uuid": "a138c5a1-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.213.246:57427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905542, "uuid": "e5e7d0a3-a568-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.250.183:39355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905646, "uuid": "2405bcc6-a569-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.59.80:50819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731905946, "uuid": "d68cc112-a569-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.10.52:53185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906174, "uuid": "5e75e7d9-a56a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.66.76:49564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906188, "uuid": "670e3485-a56a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.188.16.17:56562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906251, "uuid": "8c4220ab-a56a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.143.73:36438/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906365, "uuid": "d06b104c-a56a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.191.132:52099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906367, "uuid": "d1ec2b76-a56a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.172.127:56219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906386, "uuid": "dd4d6614-a56a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.249:34824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906545, "uuid": "3bf1775b-a56b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.100.28:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906548, "uuid": "3d7650cd-a56b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.188.217:44406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906845, "uuid": "eebd8ab3-a56b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.244.161:56067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731906909, "uuid": "14a594a8-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.109.9:57847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907009, "uuid": "504e1531-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.143:56474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907086, "uuid": "7e4b7c6e-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.211.137.185:46638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907147, "uuid": "a2721f32-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.157.85:37747/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907147, "uuid": "a2ba1715-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.120.227:35398/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907150, "uuid": "a47b9dab-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.24.36.77:47429/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907162, "uuid": "ab55330a-a56c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.47:56284/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907686, "uuid": "e3e59ed5-a56d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.116.187:50014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907688, "uuid": "e4db1d03-a56d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.188.16.17:56562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731907812, "uuid": "2edbd6aa-a56e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.109:57498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908047, "uuid": "bb11dbe5-a56e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.7.190:47331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908049, "uuid": "bc05eff9-a56e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.175:53392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908054, "uuid": "bf156b55-a56e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.159:52638/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908062, "uuid": "c3f34be2-a56e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.173.4:33755/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908126, "uuid": "ea1cf353-a56e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.60.32:48044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908466, "uuid": "b4b8739d-a56f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.183.155:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908646, "uuid": "1fcf72a0-a570-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.65.171:53193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908708, "uuid": "44e0275d-a570-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.111.117.251:48407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908825, "uuid": "8abbfa68-a570-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.11.56.146:44549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908902, "uuid": "b8bcc25f-a570-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.0:55772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908946, "uuid": "d2cc51e9-a570-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.181:50709/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731908947, "uuid": "d3bf1d55-a570-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.195:39936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909126, "uuid": "3e615a29-a571-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.6.155:33288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909156, "uuid": "5013c268-a571-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.28.5:48817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909318, "uuid": "b0a4897c-a571-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.255.133.100:37693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909546, "uuid": "388d1242-a572-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.175:53392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909848, "uuid": "ec461846-a572-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.21.253:34236/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909909, "uuid": "10e46904-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.185.157.12:35921/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731909966, "uuid": "32e2c5a5-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.154.123:48316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910027, "uuid": "571bc47e-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.158.120:40253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910086, "uuid": "7aa33912-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.0:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910102, "uuid": "83d70141-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.214:53992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910147, "uuid": "9e80a1c8-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.24.171:49012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910147, "uuid": "9ef4417d-a573-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.127.8:53338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910490, "uuid": "6b5493aa-a574-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.0:55772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910565, "uuid": "98183cb5-a574-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.225:53795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910566, "uuid": "98974a7b-a574-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.6.155:33288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910612, "uuid": "b3dce7c7-a574-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.139:60500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910626, "uuid": "bc52250c-a574-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.81.168:55562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910747, "uuid": "04a7124d-a575-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.136.35:36094/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910760, "uuid": "0c0adb9d-a575-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.201:50188/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910986, "uuid": "928b3f18-a575-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.178.3:58238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731910986, "uuid": "92a6df70-a575-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.196.236:35385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911046, "uuid": "b6691f4d-a575-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.2.160:48539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911106, "uuid": "da5c33dd-a575-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.57.172:47306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911226, "uuid": "21f10c70-a576-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.81.105:41767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911287, "uuid": "46297753-a576-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.237:38361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911412, "uuid": "90d971c4-a576-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.181:41050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911528, "uuid": "d60c7c7a-a576-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.154.123:48316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911650, "uuid": "1eaf8ab6-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.134.130:49314/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911766, "uuid": "63ea0277-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.79.99:39067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911774, "uuid": "684690cb-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://storageinstance.oss-ap-southeast-1.aliyuncs.com/link/process/SolPen.zip", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911774, "uuid": "68baa48e-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://storageinstance.oss-ap-southeast-1.aliyuncs.com/link/process/pennicle.txt", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911886, "uuid": "ab44596c-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.55:42186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911946, "uuid": "cee20b63-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.69:58636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731911946, "uuid": "cf55bcde-a577-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://filetransfer.io/data-package/A2VhDPJA/download", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912251, "uuid": "84917bf2-a578-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.133:54705/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912308, "uuid": "a6ad21cf-a578-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.175.209:44782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912425, "uuid": "ec9d9d06-a578-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.183:34119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912485, "uuid": "1043b39b-a579-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.2.160:48539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912546, "uuid": "3484ea61-a579-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.77.179:57716/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912550, "uuid": "36d47ec6-a579-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.191.13.67:41465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912666, "uuid": "7c6212e1-a579-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.90:53883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912846, "uuid": "e75a2bad-a579-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.33.23:44774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912967, "uuid": "2f5c494d-a57a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.203.68.184:38987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731912968, "uuid": "30345f04-a57a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.181:41050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913091, "uuid": "797c8206-a57a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.8:54263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913147, "uuid": "9aafdb96-a57a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.109.151:53670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913414, "uuid": "39bf74f4-a57b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.133:54705/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913446, "uuid": "4cf55665-a57b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.90:53883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913456, "uuid": "52efa54d-a57b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.188.22:36798/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913565, "uuid": "9441adba-a57b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.3.49:49346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913686, "uuid": "dc5e4149-a57b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.79.99:39067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913723, "uuid": "f21f6a52-a57b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.57:48416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913773, "uuid": "104247d8-a57c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.139:60500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731913810, "uuid": "25d8e3e0-a57c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.176.101.111:45875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914108, "uuid": "d7939e4b-a57c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.183:34119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914108, "uuid": "d79b2027-a57c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.33.23:44774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914347, "uuid": "65ea5be8-a57d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.174.211:46431/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914528, "uuid": "d1bff5ff-a57d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.8:54263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914587, "uuid": "f50e3a3d-a57d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.1.100:48650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3c8c29d6-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/18cut04.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3c8c3016-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/bose18mkt.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3c9ae1cb-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/hnbose1711.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3c9cc355-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/scut18bo03.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3cc768da-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/bose2scut18.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3cc787c3-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PTT2k5/LTL203/blob/main/update2.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3ced5ea7-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/bose1511mkt.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3ceda185-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PTT2k5/LTL203/blob/main/Document88.zip", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914707, "uuid": "3cfc564b-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PTT2k5/LTL203/blob/main/Document83.zip", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914708, "uuid": "3d211f6a-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PTT2k5/LTL203/blob/main/update3.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914708, "uuid": "3d9377f1-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/17_Advertising_Campaign_and_Collaboration.docx", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914741, "uuid": "50f2ecc2-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/18Fukrun.zip", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914750, "uuid": "56a08e5e-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/17Fukrun.zip?ref_type=heads&inline=false", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914802, "uuid": "75309c24-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/bose1511/mkt1511/-/raw/main/16Fukrun.zip?ref_type=heads&inline=false", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914826, "uuid": "83d50f3d-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.225.184:40903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731914886, "uuid": "a72cc55a-a57e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.226.178:47067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731915072, "uuid": "165fdf3f-a57f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.34.120:54940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731915189, "uuid": "5bfe6975-a57f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.4.37:50119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731915249, "uuid": "7fb97710-a57f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.11.36:52932/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731915268, "uuid": "8ae8aab5-a57f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.227.215:42455/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731915309, "uuid": "a39dc453-a57f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.242.213:43569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731915547, "uuid": "312c8d6b-a580-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.215.7:60170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916146, "uuid": "96684a55-a581-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.122.17:55398/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916146, "uuid": "96ac8e60-a581-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.175.223:47057/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916206, "uuid": "ba123506-a581-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.122.255.155:45618/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916206, "uuid": "ba15db20-a581-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.88.147.126:3320/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916208, "uuid": "bb8ebae9-a581-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.42.44.94:1028/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916269, "uuid": "dfa5e2fb-a581-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.1.100:48650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916387, "uuid": "26158895-a582-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.34.120:54940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916445, "uuid": "4895c1f0-a582-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.225.184:40903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916445, "uuid": "48a0b4df-a582-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.215.7:60170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916626, "uuid": "b46479da-a582-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.39.60:60373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916627, "uuid": "b4fec1d4-a582-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.11.36:29371/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916745, "uuid": "fb7e6e66-a582-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.176.105:38859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916869, "uuid": "454cdd31-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.170.102:57184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731916926, "uuid": "67348c67-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.31.254:59113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917015, "uuid": "9c3c0061-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.139.72:56425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917046, "uuid": "af27b64b-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.195.61:34051/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917047, "uuid": "af332a82-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.22:51318/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917063, "uuid": "b8e7a10a-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.64.66:47741/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917108, "uuid": "d3fbfc08-a583-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.82.226.202:37432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917525, "uuid": "cc7147f3-a584-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.98.180:49718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917657, "uuid": "1b5831bb-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.102:35422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917827, "uuid": "80a87f28-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.41.223:44668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917892, "uuid": "a7415e0f-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.50.237:44452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917946, "uuid": "c70b0b9f-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.42.243.36:56470/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917946, "uuid": "c78efea5-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.230.6:60981/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917947, "uuid": "c7c0f967-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.206.159.148:47349/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731917948, "uuid": "c83baf7f-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.230:51797/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918008, "uuid": "ec2ab222-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.242.213:43569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918022, "uuid": "f4d83a73-a585-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.139.114:55875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918067, "uuid": "0f7b50cc-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.139.72:56425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918184, "uuid": "550a2c60-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.176:801/8139.ps1", "Tag": [ { "name": "dropper", "colour": "#c16dd7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918186, "uuid": "5669d968-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/6gbkj5.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918203, "uuid": "603bf53a-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.183.174:36551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918245, "uuid": "79745ff5-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.247.164.242:8126/ConfigureRegistrySettings.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918247, "uuid": "7abb14fb-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.176:801/msf.txt", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "7b608582-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.173.133/output.dll", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "7b60aa33-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.173.133/output2.dll", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "7b618730-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.173.133/output3.dll", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918248, "uuid": "7b6554bc-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.173.133/output4.dll", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918249, "uuid": "7bf5182b-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.98.180:49718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918249, "uuid": "7c28cbc5-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.112.217:45258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918251, "uuid": "7d429d96-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.173.133/aaa.exe", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918251, "uuid": "7d454eca-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.227.173.133/Discovery2.exe", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918308, "uuid": "9f55e7f5-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.170.102:57184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918426, "uuid": "e55bbbeb-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.26:48283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918439, "uuid": "ed740338-a586-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.22.225:49142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918614, "uuid": "55bdca9e-a587-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.130.177:33387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918615, "uuid": "55cfd7b8-a587-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.234.160.171:58832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918907, "uuid": "0413d873-a588-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.199.40:41768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731918967, "uuid": "27f207f9-a588-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.83.180:60832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919208, "uuid": "b7c40db7-a588-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.11.219:50719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919354, "uuid": "0e8e8d5e-a589-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.139.114:55875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919645, "uuid": "bc20adeb-a589-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.124.109:59529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919753, "uuid": "fc2dd7db-a589-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.141.81:42678/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919865, "uuid": "3f682bc8-a58a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.148.11:58502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919866, "uuid": "3fc99d40-a58a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.58:56136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731919925, "uuid": "632d748c-a58a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.26:48283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920226, "uuid": "161c16bf-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.22.225:49142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920226, "uuid": "16992455-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.92.132.148:39609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920345, "uuid": "5d581554-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.188.217:44406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920411, "uuid": "84648e4a-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.83.180:60832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920411, "uuid": "847bab0c-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.1.240:54738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920411, "uuid": "8481e275-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.53.181.113/12.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920470, "uuid": "a78f73d2-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.130.177:33387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920478, "uuid": "acc9c407-a58b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.83.117:51484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920647, "uuid": "111ffc59-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.186.116:36548/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920647, "uuid": "116b5ae5-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.7.190:51115/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920672, "uuid": "2058216e-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.28:41146/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920887, "uuid": "a01103df-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.0.170:58858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920887, "uuid": "a07f4460-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.221.250:54549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920889, "uuid": "a1a19532-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.120:35613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731920954, "uuid": "c84cb8e1-a58c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.198.255:60427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921065, "uuid": "0a8120be-a58d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.208:41331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921087, "uuid": "176d326f-a58d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.82.57:57182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921126, "uuid": "2ed8b984-a58d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.85.109:57346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921246, "uuid": "76655186-a58d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.58:56136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921307, "uuid": "9ac3694e-a58d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.85.109:57346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921428, "uuid": "e2c402a1-a58d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.115.224:50671/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921547, "uuid": "2978fe40-a58e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.105.230:55686/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921667, "uuid": "71296fe6-a58e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.194.207:49100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731921845, "uuid": "db7f944a-a58e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.92.132.148:39609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922028, "uuid": "4848c8ad-a58f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.204.154:41418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922332, "uuid": "fdc6dfff-a58f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.62.186:53924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922343, "uuid": "03e612c4-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.143.17:58921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922390, "uuid": "1ffa5e33-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.133.147:45405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922448, "uuid": "42e0c5cc-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.255.251:40961/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922449, "uuid": "4349aed9-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.66.85:58320/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922450, "uuid": "43a1f53c-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.218.164:38076/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922465, "uuid": "4cd6c6dd-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.50.214:58967/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922508, "uuid": "6672bfe4-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.67.168:50230/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922509, "uuid": "66f15c93-a590-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.103.151.204:36454/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922926, "uuid": "5fd238ba-a591-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.234.216:41429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731922927, "uuid": "602a8632-a591-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.161.21:37185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923046, "uuid": "a74b4330-a591-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.208:41331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923046, "uuid": "a761cad0-a591-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.246.88:54636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923166, "uuid": "ee9241f9-a591-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.202.39:58709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923180, "uuid": "f7034239-a591-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.39.155:43791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923226, "uuid": "1286db30-a592-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.39:35129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923346, "uuid": "59ed35ed-a592-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.60.106.83:50194/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923362, "uuid": "63960ceb-a592-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.73.235:39082/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923466, "uuid": "a1446f4f-a592-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.83.117:51484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923707, "uuid": "3156b863-a593-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.133.147:45405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731923766, "uuid": "5442148a-a593-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.158.118:33519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924015, "uuid": "e8789721-a593-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/4qoef01jqan8sczprj79o/1OFICIO-DE-NOTIFICACI-N-EJECTR-NICA-CENDO-RAMA-JUDICIAL-DE-LA-REP-BLICA-DE-COLOMBIA.tar.cab.tar.001?rlkey=8px38d88qrq4ssw54132v5ke2&st=gg5nhz4s&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-29OCT2024ESM", "colour": "#f0f80a", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924019, "uuid": "eb4f4d9e-a593-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/e7vtebfe2qdfbjt87nvhu/OFICIO-DE-NOTIFICACI-N-EJECTR-NICA-CENDO-RAMA-JUDICIAL-DE-LA-REP-BLICA-DE-COLOMBIA.tar.cab.tar.001?rlkey=54p6fzmx3c1eovd1btwzy0re4&st=npm5oi4l&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-29OCT2024ESM", "colour": "#f0f80a", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924020, "uuid": "eb939c4a-a593-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/qdceo4hlwma3qipt1zb0x/4OFICIO-Nro-192-NOTIFICACI-N-JUDICIAL-AUTO-ADMISORIO-DEMANDA-LABORAL-ESM.tar.uue.tar.001?rlkey=cyher2xyvds8baps52pr0i52q&st=az6vnzwy&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-05NOV2024ESM", "colour": "#95b1fc", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924073, "uuid": "0affe02f-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/259mxho3dnhaw3wxodo4d/3NOTIFICACI-N-ELECTR-NICA-JUDICIAL-AUTO-ADMISORIO-DEMANDA-LABORAL.tar.uue.tar.001?rlkey=565r566vsgouhelnngcvb9gm0&st=pavbqg0o&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-06NOV2024ESM", "colour": "#b1579c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924073, "uuid": "0b1ffb3f-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/s0y5qg6l0vkd7m23drmqg/2NOTIFICACI-N-ELECTR-NICA-JUDICIAL-AUTO-ADMISORIO-DEMANDA-LABORAL.tar.uue.tar.001?rlkey=tgkpr9bxgtbqhcfril01rtq4o&st=0wmyh1qy&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-06NOV2024ESM", "colour": "#b1579c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924073, "uuid": "0b2b142d-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/1b3qdpnqx1ho46tgb7h7u/2OFICIO-Nro-192-NOTIFICACI-N-JUDICIAL-AUTO-ADMISORIO-DEMANDA-LABORAL-ESM.tar.uue.tar.001?rlkey=kv7tv4v03hjp1cwycaiagq3fh&st=lmaolu0a&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-07NOV2024ESM", "colour": "#52b499", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924127, "uuid": "2bc0703d-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/t92cp2l9m4nmvlc2bjhwt/3NOTIFICACI-N-ELECTR-NICA-CENDO-RAMA-JUDICIAL-DEL-PODER-P-BLICO-ESM-CONFIRMAR-RECIBIDO.tar.CAB.tar.001?rlkey=1g9fmco6l3uodeos1eois744j&st=cxw7qif9&dl=0", "Tag": [ { "name": "pw-ESM10302024", "colour": "#d55f77", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924129, "uuid": "2cbc02c9-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/2o0u3qw8zexi62g35iq4n/2NOTIFICACI-N-ELECTR-NICA-ESM-AGRADECEMOS-CONFIRMAR-RECIBIDO-ANEXAMOS-DOCUMENTOS-INMPORTANTES.tar.uue.tar.001?rlkey=6pq4a7hhf98h7xy28rkq9uqwe&st=a3pqgh99&dl=0", "Tag": [ { "name": "PW-15NOV2024ESM", "colour": "#ace462", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924130, "uuid": "2d8c0dc0-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/eky5rp2utq8tof1094oi2/Oficio-391-NOTIFICACI-N-ELECTR-NICA-CENDO-RAMA-RADICADO-153153135-000-6562.tar.uue.tar.001?rlkey=dil8h7h6ffwlvt15lrrnurg70&st=z29gqnxh&dl=0", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "PW-12NOV2024ESM", "colour": "#0236d4", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924247, "uuid": "734700b9-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.139.114:55875/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924249, "uuid": "73e9084c-a594-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.157.145.199:57079/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924626, "uuid": "551c19c6-a595-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.7.247:60101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924685, "uuid": "77f3da1e-a595-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.141:50589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924846, "uuid": "d841a3e5-a595-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.58:41288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731924909, "uuid": "fdd27c8b-a595-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.161.21:37185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925085, "uuid": "66a7f7bd-a596-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.246.88:54636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925161, "uuid": "941168cc-a596-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.2.181:36047/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925165, "uuid": "9676e13d-a596-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.183.134:46559/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925209, "uuid": "b068964c-a596-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.31:44706/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731925508, "uuid": "6298d30e-a597-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.164.191:57513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926049, "uuid": "a51f2ac7-a598-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.160.110:55630/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926051, "uuid": "a60bebd8-a598-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.78.11.4:4482/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926068, "uuid": "b07c97f9-a598-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.255.17:57904/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926166, "uuid": "eafa81c7-a598-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.158.118:33519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926287, "uuid": "33263b94-a599-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.58:41288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926409, "uuid": "7bcadc9a-a599-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.101.33:42316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926526, "uuid": "c174be1f-a599-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.7.247:60101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926708, "uuid": "2dff9a7b-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.218.114.67:16059/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926709, "uuid": "2e3e3606-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.245.124:40272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926828, "uuid": "756f8c04-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.82.20:47867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926887, "uuid": "9875b39f-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.226.183:34224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926947, "uuid": "bc99cf53-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.55.100:49114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926948, "uuid": "bcb6e2ae-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.125.156:45656/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926975, "uuid": "cd4d137c-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.200.220.118:8090/ledshowa.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926977, "uuid": "ce214139-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.200.220.118:8090/ledshow1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731926979, "uuid": "cf37da90-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.200.220.118:8090/ledshow.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927021, "uuid": "e8ac2d8c-a59a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.200.220.118:8090/ledshow2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927069, "uuid": "04fbbab9-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.141.160:58735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927082, "uuid": "0c9e9abe-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.13:41531/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927130, "uuid": "299aa9bd-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.255.202.86:42933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927311, "uuid": "9583c61d-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.184.20:49534/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927322, "uuid": "9becd695-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.78.177:59627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927323, "uuid": "9c555608-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.0.180.160:47011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927372, "uuid": "b97e9b93-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.141.160:58735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927485, "uuid": "fd257f20-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.123.66:59587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927486, "uuid": "fd77e55f-a59b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.164.191:57513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927847, "uuid": "d4da65d8-a59c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.205.48:46438/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927858, "uuid": "db4b278a-a59c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.195.204:40710/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731927861, "uuid": "dd29a96e-a59c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.241.7:41111/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928098, "uuid": "6a830f5f-a59d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.144.255:47272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928209, "uuid": "ac8ada55-a59d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.181.234:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928265, "uuid": "ce1eac9e-a59d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.31.254:59113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928326, "uuid": "f221a074-a59d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.236.251:52493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928445, "uuid": "3976bcaa-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.130.85:48707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928446, "uuid": "39f378f9-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.226.183:34224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928447, "uuid": "3a30cced-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.123.66:59587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928685, "uuid": "c88b9cb6-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.68.218:45992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928746, "uuid": "ec63313a-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.91.234:54264/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928748, "uuid": "ed9754a9-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.132.246:53746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731928774, "uuid": "fd134596-a59e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.224.48:60845/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929587, "uuid": "e1e588ed-a5a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.144.255:47272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929647, "uuid": "0594c09d-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.76.93:59591/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929658, "uuid": "0bf203ea-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.147:57250/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929886, "uuid": "93e9cad0-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.167:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731929886, "uuid": "941e01df-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.228.0:44320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731930064, "uuid": "fe444434-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.182:42130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731930065, "uuid": "fea4006d-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.36.127:45901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731930674, "uuid": "6a0e1b95-a5a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.89/iwir64", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731930847, "uuid": "d09f9c25-a5a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.18.115:58226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931085, "uuid": "5ee177c4-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.245.124:40272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931273, "uuid": "ceb57e05-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.24.238:60544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931275, "uuid": "d014f3f4-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.200/.puscarie/.msq.tar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931275, "uuid": "d04de887-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://xkobeimparatu.net/.puscarie/.msq.tar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931325, "uuid": "edfa6825-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.228.0:44320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931447, "uuid": "369ba039-a5a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.35.20:57834/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931507, "uuid": "5a3c9460-a5a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.7:34981/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931626, "uuid": "a150332e-a5a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.101.34:35441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731931687, "uuid": "c54eb020-a5a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.70.182:42130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932227, "uuid": "07920def-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.89.156:53539/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932286, "uuid": "2aa3b586-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.213.69.62:57353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932287, "uuid": "2b70df86-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.46.33:45913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932407, "uuid": "72d1a6af-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.215.84:48732/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932527, "uuid": "ba0bfd0b-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.18.115:58226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932659, "uuid": "08f289e9-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ump911.b-cdn.net/hghbhjknj.txt", "Tag": [ { "name": "b-cdn", "colour": "#68F447", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932662, "uuid": "0a79965e-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.24.238:60544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932887, "uuid": "90a55cef-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.167.129:53711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932887, "uuid": "90c4a080-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.249:40013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932945, "uuid": "b3a89158-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.101.34:35441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731932946, "uuid": "b411f5e1-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.210.198:38748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933187, "uuid": "43ab3017-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/attn.vbs", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933189, "uuid": "44ab7dc3-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/Lietz/rechnung_966470_100_20240_PDF.lnk", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933189, "uuid": "451c6690-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/Tardiff/inv.lnk", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933195, "uuid": "484078f1-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/galeria.bat", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933196, "uuid": "49523bac-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/emes.bat", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933211, "uuid": "52206fdb-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/WLCHA.zip", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933212, "uuid": "52d6b7c0-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/FSTP.zip", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933261, "uuid": "6ffb9a08-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://german-multiple-reunion-foundation.trycloudflare.com/ADCHA.zip", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933310, "uuid": "8cd9f34d-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.124.194:49126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933428, "uuid": "d34ee586-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.186.92:58177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933547, "uuid": "1a4a1361-a5aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.46.33:45913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933787, "uuid": "a98ec59c-a5aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.176:37936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731933968, "uuid": "15122b04-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.218:50839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934086, "uuid": "5bbffc9a-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.137.190:50518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934165, "uuid": "8a96f259-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.6:36950/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934209, "uuid": "a4c29298-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.167.129:53711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934326, "uuid": "ea82eb8a-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.47.187:52840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934326, "uuid": "eaa855d5-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.95.244:39203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934386, "uuid": "0e17a149-a5ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.186.92:58177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934445, "uuid": "31772d48-a5ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.249:40013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934446, "uuid": "322e9fcc-a5ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.57.226:44512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731934810, "uuid": "0b526381-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.207:47444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935047, "uuid": "98282cad-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.97.72:52463/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935049, "uuid": "999cdb0a-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.83.164:56924/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935050, "uuid": "9a553d61-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.154.40:48281/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935108, "uuid": "bc6a9190-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.81.168:55562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935287, "uuid": "271e76cf-a5ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.218:50839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935346, "uuid": "4a868681-a5ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.124.194:49126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935409, "uuid": "70483abc-a5ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.51:37363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935718, "uuid": "28098193-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-62d5cdf3fcfb4f1a97de07d140c6faa6.r2.dev/chomeSet.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935826, "uuid": "687112ef-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.51:37363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935947, "uuid": "b0fdd30e-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.93:49544/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935947, "uuid": "b1026a7c-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.241.192:54981/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935948, "uuid": "b12989a4-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.189.105:55006/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935948, "uuid": "b12caadc-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.95.244:39203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935948, "uuid": "b16e3ac9-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.15.161:57168/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935949, "uuid": "b1afbc52-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.138.100:49900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731935949, "uuid": "b1df0d6f-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.227.103:32880/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936008, "uuid": "d56126e3-a5af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.47.187:52840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936366, "uuid": "aaaa5b17-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.207:47444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936425, "uuid": "cd678ae4-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ni-olympic-forests-invoice.trycloudflare.com/tat.vbs", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936425, "uuid": "cd6d64fd-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ni-olympic-forests-invoice.trycloudflare.com/voi.bat", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936425, "uuid": "cdecbf68-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ni-olympic-forests-invoice.trycloudflare.com/DE/DKM-9067291.pdf.lnk", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936426, "uuid": "cdfc67c1-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.dropboxusercontent.com/scl/fi/5q0yfui8952dbdk2bzxtk/Rechnung-10923331-PDF.zip?rlkey=cl9m35y963jw0ao7l41mmqmtd&st=jeg6hbwe&dl=0", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936546, "uuid": "15aa5986-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.209:43014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936632, "uuid": "49068acd-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.191.1:58507/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936733, "uuid": "85003ea0-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.248.163:45561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936848, "uuid": "c9f60345-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.99.5.249:45872/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936909, "uuid": "ee5fb401-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.127.93:45426/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731936922, "uuid": "f5b0c817-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.35.244:57347/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937086, "uuid": "57ac7b71-a5b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.247.101:57689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937086, "uuid": "57e68c8d-a5b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.160.234:52511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937209, "uuid": "a0b1966a-a5b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.52:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937445, "uuid": "2dd5cab9-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.138.100:49900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937510, "uuid": "541a2785-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.159:52638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937574, "uuid": "7a5ba0c8-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.159:52638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937747, "uuid": "e167ead5-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.115.184:50902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937747, "uuid": "e1d73f9c-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.158.41:49492/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731937759, "uuid": "e8b2d5ce-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.120:49365/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938045, "uuid": "937d99b1-a5b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.209:43014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938227, "uuid": "ff9ba63d-a5b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.160.234:52511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938316, "uuid": "34b03b5d-a5b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ready-bathroom-carter-membrane.trycloudflare.com/bab.zip", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938317, "uuid": "3515d220-a5b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ready-bathroom-carter-membrane.trycloudflare.com/cam.zip", "Tag": [ { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938586, "uuid": "d5f25ec4-a5b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.247.101:57689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731938766, "uuid": "412a2a62-a5b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.163.20:46526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939126, "uuid": "17d68876-a5b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.18.19:51404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939189, "uuid": "3cf0b79e-a5b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.93:49544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939369, "uuid": "a85f57d4-a5b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.73.18:49612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939545, "uuid": "11309c35-a5b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.101.37.59:41879/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939553, "uuid": "1638da7b-a5b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.160.158:57685/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731939787, "uuid": "a1637846-a5b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/LummaC21.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940447, "uuid": "2b1178ad-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.27.29:34199/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940447, "uuid": "2b3ceb4b-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.139.38:34052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940464, "uuid": "3510214f-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.98.198:41103/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940473, "uuid": "3a543c5f-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.115.93:37818/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940685, "uuid": "b8c7ecea-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.3.216:38760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940686, "uuid": "b945cf6f-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.237.202:60423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731940986, "uuid": "6c7fca70-a5bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.11.138:18079/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941127, "uuid": "c080700c-a5bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.3:49691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941166, "uuid": "d7c83515-a5bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.109.232:44440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941227, "uuid": "fba66b61-a5bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.237.202:60423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941348, "uuid": "44260f39-a5bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.9.253:39361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941528, "uuid": "af69f27f-a5bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.127:10248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941914, "uuid": "9530e083-a5bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.3:49691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731941946, "uuid": "a84b828c-a5bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.67.69:44654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942186, "uuid": "375bffb6-a5be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.109.232:44440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942186, "uuid": "37962f90-a5be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.137.57:50275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942248, "uuid": "5c2ecfc8-a5be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.139.38:34052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942248, "uuid": "5cab14e9-a5be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.134.246:42245/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942665, "uuid": "54e4f347-a5bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.9.253:39361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942666, "uuid": "55637808-a5bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.171.43:60755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731942966, "uuid": "081b3ea0-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.89.162:40063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943165, "uuid": "7f04284d-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.206:36246/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943210, "uuid": "99a12eaf-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.217.188.73:36203/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943210, "uuid": "99ecfdc7-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.116:42589/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943210, "uuid": "99f03f83-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.6.200:36809/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943291, "uuid": "ca4ffdb9-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.96:38335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943385, "uuid": "02245eb0-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.61/aieurghnb/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943389, "uuid": "047f4e52-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.241.14:36488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943445, "uuid": "2613f580-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.141.185:47213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943507, "uuid": "4abf070e-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.163.20:46526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943566, "uuid": "6e1da5bb-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.137.57:50275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943746, "uuid": "d91532c2-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.252.219.217:51588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943750, "uuid": "dbaabbaf-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.178:55628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943816, "uuid": "02e6bb9d-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.154.170:57124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943872, "uuid": "243b00d6-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.80.0.224:47181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731943932, "uuid": "485f9af8-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.153.166:46916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944049, "uuid": "8daa088a-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.40:50549/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944066, "uuid": "97ca6b31-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.100.25:50589/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944111, "uuid": "b2e81226-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.79:51469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944111, "uuid": "b2f62845-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://youxj.staff.plenarykcg.com/merchantServices", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944111, "uuid": "b2f6ea6e-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.206.159.148:47349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944647, "uuid": "f266651e-a5c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.252.219.217:51588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944663, "uuid": "fc214739-a5c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.54.106:45604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944767, "uuid": "39a66a1d-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.96.51:49167/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944782, "uuid": "4307d1bd-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.44.208:54604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944947, "uuid": "a4f2b2c4-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.30.241.11:41158/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731944947, "uuid": "a4f6fffc-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.156.89.95:56120/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945186, "uuid": "33e8d3b8-a5c5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.154.170:57124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945688, "uuid": "5e96e8bd-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.247:59026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945786, "uuid": "998302f0-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.99.247:59026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945848, "uuid": "be3f404d-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.37.89:50754/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945908, "uuid": "e236f895-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.169.46:58276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945909, "uuid": "e2b3c8f0-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.254:33412/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731945917, "uuid": "e750f87d-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://rigzuvzi3bnz3.top/1.php?s=mints13", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ITA", "colour": "#3dc978", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946147, "uuid": "70449de7-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.70.231:42254/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946148, "uuid": "70da6184-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.125/bins/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946208, "uuid": "9501d0b0-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.44.208:54604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946265, "uuid": "b693e06d-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.7.159/botpilled/rbot", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946267, "uuid": "b7b5f13f-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.15.165:53156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731946582, "uuid": "73c2b674-a5c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.54.106:45604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947046, "uuid": "885bcb07-a5c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.157.224:34680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947285, "uuid": "16b4ab0a-a5ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.7.204.46:37553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947346, "uuid": "3b3254e6-a5ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:48522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947532, "uuid": "a9c8f264-a5ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.130.85:48707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947650, "uuid": "f07b7f1b-a5ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.169.46:58276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947708, "uuid": "1309e676-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.224.134:37444/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947710, "uuid": "142c9dce-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.203:50133/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947719, "uuid": "196986de-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.202:43699/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731947946, "uuid": "a08b99fe-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.141.245.82:46625/Mozi.a", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948009, "uuid": "c625233d-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.141.245.82:46625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948009, "uuid": "c64d9341-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.141.245.82:46625/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948186, "uuid": "2fa9157c-a5cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.234.160.171:58832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948564, "uuid": "10f09494-a5cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.33.184:38089/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948847, "uuid": "ba013ab6-a5cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.209.133.128:20722/b/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731948907, "uuid": "dd7d3e3c-a5cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.7.204.46:37553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949026, "uuid": "24405f5f-a5ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:48522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949145, "uuid": "6b6005e6-a5ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.96.155:50542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949343, "uuid": "e16d31cb-a5ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.89:44399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949387, "uuid": "fb6d61d4-a5ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.3.21:39693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949448, "uuid": "1fbf8d38-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.37.147:39293/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949513, "uuid": "46fc4fb1-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.167.61:35840/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949747, "uuid": "d1f57fb0-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.239.117:59691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949747, "uuid": "d21fdfd1-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.222.57.90/zFSrvbrRquo53.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731949885, "uuid": "245bbfa8-a5d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.248.64:44341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950125, "uuid": "b3a96bfe-a5d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.80:54558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950347, "uuid": "37c03ef6-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.201.58:35709/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950348, "uuid": "3842bec2-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.102.13:44313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950527, "uuid": "a35e6502-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.104.145:34217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950586, "uuid": "c6753995-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.89:44399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950647, "uuid": "eabb3ed8-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.204.98:35113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950647, "uuid": "eadbebe7-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.54.116:53643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950707, "uuid": "0e988ba1-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.177.151.72:38393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950707, "uuid": "0eaea299-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.177.151.72:38393/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950708, "uuid": "0eb4e351-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.208.26.29:45462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950708, "uuid": "0ef0d5c9-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.192.37.173/hiddenbin/boatnet.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950708, "uuid": "0ef0de1c-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.6.77:51260/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950708, "uuid": "0efd7e73-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.192.37.173/hiddenbin/boatnet.arm7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950708, "uuid": "0f21df33-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.235.228:40063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950709, "uuid": "0f51ec1f-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.35.225.129:3423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950764, "uuid": "306f0b42-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.170.144.88/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950765, "uuid": "30eca3f9-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.214.234:54141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731950885, "uuid": "78ac2016-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.239.117:59691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951013, "uuid": "c50347b2-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.231/xampp/noc/seemefasterthanbeforewithhisbestthingsinonlineforgetreadyfor.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951014, "uuid": "c5291412-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.231/657/caspol.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951074, "uuid": "e90947fb-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.243.136/xampp/rf/seemybestbeautifulgirlwhowantbestthignsenitrelifetimethingstobe.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951074, "uuid": "e9647a4b-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.243.136/xampp/de/givemebestwithentiretimegivenmebestthingsalwaysforgetbacknew.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951075, "uuid": "e97ed5e2-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.243.136/36/caspol.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951075, "uuid": "e99d4dd8-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.243.136/37/caspol.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951135, "uuid": "0d583fbd-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.191.81.185:55628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951137, "uuid": "0ec7c4cf-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1gx2Ez0dXC3zO342-RxkEc4d-MHYAk-pE", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951137, "uuid": "0ef76418-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1KlrrXmJ0mpaO4gvbs34InfJ1sQexs5WP", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951194, "uuid": "30655302-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavyequipmentsales.au/admin/Verdensalt.asi", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951198, "uuid": "33150e2b-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavyequipmentsales.au/admin/bmFpLgqmXzovv105.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951247, "uuid": "508a49e0-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.44.178/53/seemybestnetworkwhichgivebestthingsentirelifewithme.tIF", "Tag": [ { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951249, "uuid": "516fdf65-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.44.178/53/cg/bestthingsalwaysgetbesrentirelifethingstogdomybetterthignswithgreat.hta", "Tag": [ { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951267, "uuid": "5c326633-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.194.40:37791/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951365, "uuid": "96dd6379-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.154.192:35404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951546, "uuid": "02a8d599-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.248.64:44341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951607, "uuid": "26e60343-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.236.160.24:59697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951608, "uuid": "2742cc88-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.207.174.248:41988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951608, "uuid": "27507bf8-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.214.234:54141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951608, "uuid": "27ac4476-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.14.203:55099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951611, "uuid": "28fe2b15-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.182.153.235:54579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951636, "uuid": "38059063-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.192.37.173/hiddenbin/boatnet.mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951665, "uuid": "49539b26-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.159.113.79:8888/94082236017531.dll", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "POL", "colour": "#f855db", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "ukr", "colour": "#6c001e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951727, "uuid": "6e7f3cff-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://end-vt.com/megafund/gambinho.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951785, "uuid": "90ee85f8-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.62.186:53924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731951849, "uuid": "b70eaca9-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.154.196.14:51979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952148, "uuid": "69179cae-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.73.61:37132/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952208, "uuid": "8cfc2e40-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.88.236:33550/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952507, "uuid": "3f576cf1-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.204.98:35113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "6233f192-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.188.14:37780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "62602f95-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.89.198:52804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "626bbf10-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.81.105:41767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "6276d817-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.114.222:43251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "628aef3d-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.146.247:53469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "629d5f6f-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.187.17.22:38602/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "62a8e9a8-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.244.214.82:41936/Mozi.a", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952566, "uuid": "62b3e37f-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.244.214.82:41936/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952567, "uuid": "62bed9be-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.191.4:40530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952567, "uuid": "62dc7fc0-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.89.252.236:38360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952686, "uuid": "aa1eb779-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.154.192:35404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952745, "uuid": "cd29916c-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.54.116:53643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952747, "uuid": "ce184224-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.214.14:35876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731952927, "uuid": "399a9967-a5d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.3.21:39693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953047, "uuid": "81290403-a5d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.204.154:41418/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953346, "uuid": "3389663e-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.182.127:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953347, "uuid": "33e93846-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.51.51:35913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953466, "uuid": "7acf384b-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.191.21.161:39737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953466, "uuid": "7adff5da-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.161:36111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953466, "uuid": "7aec586a-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.44.39:55598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953466, "uuid": "7b002dba-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.105.228:52093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953466, "uuid": "7b0686cd-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.4.37:50119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953466, "uuid": "7b24fa49-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.63.178:60535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "7b64c449-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.131.75:54380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "7b652486-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.189.22:46479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "7b652716-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.91.48:55548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "7b69f930-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.57.224:41718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "7b6d4d71-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.57.224:41718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953467, "uuid": "7bb9ffea-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.179.249.15:57687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953494, "uuid": "8b5b8c6a-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.60.31:58165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953526, "uuid": "9e6a3e6f-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.191.21.161:39737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953526, "uuid": "9e7b8388-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.193.133/bins/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953526, "uuid": "9ecde9ed-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.241.192:54981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953526, "uuid": "9ed2adc3-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.131.75:54380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953527, "uuid": "9ef8894d-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.235.211:38616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953527, "uuid": "9f506bce-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.214.147:42657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953527, "uuid": "9f883c1d-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.248.230.19:39165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953531, "uuid": "a17f5aed-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.220.94:59953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953536, "uuid": "a4bd727c-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.69.170:35025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953541, "uuid": "a7dddfd7-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.36:59932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953546, "uuid": "aa46613f-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.36:59932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731953586, "uuid": "c26a78f0-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.203:38016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954009, "uuid": "be6be532-a5d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.12.37:40650/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954247, "uuid": "4c742dd4-a5da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.109.225:55260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954327, "uuid": "7c4a45d1-a5da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.249.211:47421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954425, "uuid": "b6c0a353-a5da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.214.14:35876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954792, "uuid": "912565b4-a5db-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.203.68.184:38987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731954793, "uuid": "9191c36b-a5db-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.147.32:39919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955086, "uuid": "40c46cf6-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.53.121:56969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955174, "uuid": "74fb80e7-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.203:38016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955208, "uuid": "89191660-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.235.4:55532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955385, "uuid": "f2cfc6f4-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.79:51469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955386, "uuid": "f336e23e-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.109.225:55260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955626, "uuid": "82624ca8-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.51.51:35913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955686, "uuid": "a61439f9-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.181.12.35:43025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955687, "uuid": "a686efdf-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.246.172:56097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955745, "uuid": "c92f3b81-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.152.170.36:35504/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955745, "uuid": "c9327212-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.38.19.198:56330/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955746, "uuid": "c9a08618-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.147.32:39919/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955746, "uuid": "c9dc9ed6-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.173.109:60514/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731955929, "uuid": "36bf7e42-a5de-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.255.221:54004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731956108, "uuid": "a1599105-a5de-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.245.92:49338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731956285, "uuid": "0b3e5f3f-a5df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.235.4:55532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731956286, "uuid": "0b83cc6c-a5df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.172.87:40464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731956647, "uuid": "e2e3b0a1-a5df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.149.23:38271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731956648, "uuid": "e3577ae5-a5df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.191.236:36224/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731956662, "uuid": "ebc092cb-a5df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.40.31:43516/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957065, "uuid": "dc448e62-a5e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.147.32:39919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957246, "uuid": "480e24d0-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.255.221:54004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957366, "uuid": "8fb1893a-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.172.87:40464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957367, "uuid": "8fef5db8-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.246.172:56097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957425, "uuid": "b2a669f0-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.83.164:56924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957502, "uuid": "e06eb015-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.56.44:54326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957553, "uuid": "ff39996c-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.15:46663/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957564, "uuid": "055611fa-a5e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.195:33671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957725, "uuid": "655c8bab-a5e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.21.68:51426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731957847, "uuid": "ae2d8242-a5e2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.241:42438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958145, "uuid": "60135afd-a5e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.15.84:50483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958146, "uuid": "603a4fd8-a5e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.149.23:38271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958214, "uuid": "8923d73b-a5e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.246.180:56322/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958290, "uuid": "b668da80-a5e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.69:36454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958463, "uuid": "1d84ca0d-a5e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.190:40523/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958566, "uuid": "5ac6e253-a5e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://tuw.events.socalpocis.org/gotoCheckout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731958745, "uuid": "c55ca81b-a5e4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.146.192:52194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959228, "uuid": "e567ba8b-a5e5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.215.222:53093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959346, "uuid": "2bd0caf1-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.0.55:46041/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959347, "uuid": "2c0829b3-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.153.122:40304/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959349, "uuid": "2d516378-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.32:55842/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959435, "uuid": "60a553c5-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.178:40255/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959466, "uuid": "734dcebd-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.214.158.94:56633/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959482, "uuid": "7c6e5479-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.253.31:58611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959585, "uuid": "ba33eb3b-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.241:42438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959886, "uuid": "6db138cc-a5e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.78.59:59284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731959886, "uuid": "6dcaac41-a5e7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.17.127:37031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960134, "uuid": "017b4626-a5e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.242.49.130:44295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960246, "uuid": "445b09e1-a5e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.96.243:57237/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960365, "uuid": "8b4ca8c4-a5e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.99.169:53042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960426, "uuid": "af437cd1-a5e8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.146.192:52194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960609, "uuid": "1c81d2b6-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.226.172:56276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960787, "uuid": "86b082b8-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.71.160:42471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960846, "uuid": "a98b45d6-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.215.222:53093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731960984, "uuid": "fbdd74ca-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.174.223:57183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961146, "uuid": "5ca84c6b-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.78.59:59284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961147, "uuid": "5d18c25f-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.26:48283/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961147, "uuid": "5d39837e-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.15.179:45232/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961161, "uuid": "65bbf3a7-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.138:52323/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961162, "uuid": "65c4533e-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.116:52191/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961208, "uuid": "818db9ff-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.242.49.130:44295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961325, "uuid": "c781fe7e-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.226.172:56276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961326, "uuid": "c7c7a504-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.255.211:54752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961565, "uuid": "568c67df-a5eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.99.169:53042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961686, "uuid": "9e588079-a5eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.28:33797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731961746, "uuid": "c21bba92-a5eb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.17.127:37031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962051, "uuid": "77fdc949-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.186.163:48018/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962051, "uuid": "78340759-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.15.145:45326/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962070, "uuid": "83550743-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.0.54:51098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962166, "uuid": "bc8f4eab-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ndur.events.socalpocis.org/merchantServices", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962286, "uuid": "04066050-a5ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.77.128:40898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962465, "uuid": "6eb9ef79-a5ed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.55:42186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962886, "uuid": "69722f51-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.255.211:54752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962946, "uuid": "8d9cf953-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.28:33797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962946, "uuid": "8dafc4b8-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.214.65:40947/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731962948, "uuid": "8e65f7d5-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.255.133.100:37693/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963010, "uuid": "b3ab8e75-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.77.4.165:41599/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963013, "uuid": "b5575808-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.68.173:60677/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963186, "uuid": "1cb35d2f-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.158.69:53399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963454, "uuid": "bc144b9d-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.77.128:40898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963486, "uuid": "cf5b0e21-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.116.162:43937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963487, "uuid": "cfa99442-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.55.205:38490/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963487, "uuid": "d01e84a1-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.113.188:34234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963489, "uuid": "d0c4843c-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.188.16.208:45242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963546, "uuid": "f3525834-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.0.54:51098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963630, "uuid": "25655f37-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.147.52:50636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963669, "uuid": "3c1ad0b8-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.56.81:33548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963847, "uuid": "a6b56684-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.42.37:48515/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963863, "uuid": "b02f217f-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.192.15:60208/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731963907, "uuid": "ca0a5de4-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.137.250.97:38148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964326, "uuid": "c40c22d4-a5f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.38.236:45618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964386, "uuid": "e78fa080-a5f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.75:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964386, "uuid": "e79a891e-a5f1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.158.69:53399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964445, "uuid": "0ae6fe3e-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.125.241.132:52311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964445, "uuid": "0b00b716-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.222:56145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964445, "uuid": "0b111c8e-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.89.162:40063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964524, "uuid": "3a3d50de-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.75.188:60382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964626, "uuid": "76916a75-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.174.211:46431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e411be3f-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e411d97e-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e412c8ef-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e41a2ecb-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e41a5cce-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e41e9185-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e41e91e1-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964809, "uuid": "e4216bbf-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964810, "uuid": "e44cb220-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964810, "uuid": "e46cb5e3-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.41.156:47067/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964866, "uuid": "05e5cbd7-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964925, "uuid": "28b0aeb2-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.34.230.76/bins/owari.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964925, "uuid": "291c505b-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.55.205:38490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731964987, "uuid": "4e2dd435-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.188.16.208:45242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965167, "uuid": "b97e4774-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965167, "uuid": "b9863d29-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "b9f03b6d-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "b9f25e79-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965168, "uuid": "ba16e541-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965169, "uuid": "ba223750-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965169, "uuid": "ba3134ef-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965169, "uuid": "ba82dc33-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965170, "uuid": "bac81d69-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965226, "uuid": "dca5b71d-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "dcc20527-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "dd03d2b2-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "dd279c99-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "dd2ea0a9-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965227, "uuid": "dd39c07e-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965228, "uuid": "dd784776-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965228, "uuid": "dd78b553-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965228, "uuid": "dd8ae7a4-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "de18389e-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "de3023c0-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "de774fed-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965229, "uuid": "de77da34-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/bot.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965285, "uuid": "ff617dbf-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965285, "uuid": "ff7095eb-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/w.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965285, "uuid": "ff70985f-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965285, "uuid": "ff8a914e-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://panel.chanbaba.xyz/c.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965345, "uuid": "2367b4a0-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965345, "uuid": "23718a89-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.220.106.85/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965346, "uuid": "242f3d94-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.147.52:50636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965346, "uuid": "242ff7e7-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.56.81:33548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965411, "uuid": "4a6f40f2-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.152.67:38648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965648, "uuid": "d827242d-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/dfkoiec.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965649, "uuid": "d84e8d63-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/nidbfhk.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965649, "uuid": "d8692d9f-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.205.177:60821/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965667, "uuid": "e343b244-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.20:44247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965886, "uuid": "66006b6f-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.162.176:52456/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731965983, "uuid": "9fdaf945-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/Potwierdzenie.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966064, "uuid": "cff78b72-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.92:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966127, "uuid": "f52fa9dc-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.18.63:50800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966186, "uuid": "18bb3531-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.121.29:55827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966187, "uuid": "1975d513-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.13.190:52921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966205, "uuid": "23ba8673-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.4.229:60872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966307, "uuid": "60d243c1-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.174.211:46431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966490, "uuid": "cd806281-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.104.158:51568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966546, "uuid": "eef6bc94-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.46.170:49630/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966546, "uuid": "eef714fa-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.18.63:50800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966727, "uuid": "5b1405b4-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.4.224.54:49807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966847, "uuid": "a271e435-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.114:49574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966920, "uuid": "cded6cc5-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.236.215:45040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731966966, "uuid": "e99611b0-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.152.67:38648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967051, "uuid": "1c56bddf-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.144.70:38081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967157, "uuid": "5b27e0bd-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.22:44150/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967326, "uuid": "c0161944-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.32.50.31:60056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967326, "uuid": "c0512fc9-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:39095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967389, "uuid": "e5e8ebfe-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://petshopsg.com/work/xxx.zip", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967389, "uuid": "e5ea9d7d-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://inayatullah.com/work/xxx.zip", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967445, "uuid": "073df621-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.20.83:33416/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967446, "uuid": "078ef211-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.83.180:60832/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967446, "uuid": "07b2d637-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.7:34981/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967447, "uuid": "080da77f-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.68.248:53031/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967452, "uuid": "0b6a7a0c-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.24.36.3:47507/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967565, "uuid": "4e96fdb7-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.114.40:37009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967686, "uuid": "966dd56d-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.121.29:55827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967745, "uuid": "ba21cbfe-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.222:56145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967934, "uuid": "2a5161fc-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.235.190:40057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967986, "uuid": "493d2366-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.32.50.31:60056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731967986, "uuid": "498d0419-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.176:37936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968047, "uuid": "6db252c0-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.234.96:53547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968167, "uuid": "b58838d7-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.4.224.54:49807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968229, "uuid": "da528865-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.14.58:42433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968286, "uuid": "fc0e9ddd-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.104.158:51568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968287, "uuid": "fcbb9c85-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.177.207:13098/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968360, "uuid": "28221fdd-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.252:55910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968585, "uuid": "aec9324b-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.99:52203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968586, "uuid": "aee77980-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.21.123:37809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968586, "uuid": "af364a24-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.44.2:47668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968587, "uuid": "afacb7f6-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.131.191:60632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968708, "uuid": "f7bb8464-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.93.186:55078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968768, "uuid": "1bd9a626-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.135.95:40254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968826, "uuid": "3e2303b9-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:39095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968827, "uuid": "3e87ca9b-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.123.54:37560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968840, "uuid": "464b8d40-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.217:57392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731968946, "uuid": "8598a96b-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.94.67.51:55971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969011, "uuid": "ac4c8230-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.49.18:38082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969187, "uuid": "1521299b-a5fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.32.145:45874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969247, "uuid": "38d40a5e-a5fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.230.247:43422/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969308, "uuid": "5d9c35e1-a5fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.41.223:44668/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969311, "uuid": "5f35a23a-a5fd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.235.190:40057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969845, "uuid": "9d8fa2e4-a5fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.44.2:47668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731969966, "uuid": "e5884804-a5fe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.99:52203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970086, "uuid": "2d1db9d9-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.21.123:37809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970087, "uuid": "2de785bb-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.56.235:37796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970147, "uuid": "5169478e-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.172.113:59999/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970164, "uuid": "5bc2773d-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.12.18:47392/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970566, "uuid": "4b699489-a600-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.12.89:43111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970625, "uuid": "6ea3c0f4-a600-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.32.145:45874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970688, "uuid": "93f7a73e-a600-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.228.87:36250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970747, "uuid": "b7003517-a600-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.74.128:34204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731970867, "uuid": "fef95b72-a600-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.34.121:54535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971063, "uuid": "738f76ce-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.24.36.23:58053/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971109, "uuid": "8eb02e24-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.223.187:41030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971109, "uuid": "8ec6fd38-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.144:59967/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971109, "uuid": "8f040137-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.165:43667/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971109, "uuid": "8f39ec51-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.238.189:58805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971120, "uuid": "9546cfbf-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.119.2:48380/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971139, "uuid": "a099a62f-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.78:38923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971166, "uuid": "b0dc94ea-a601-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.125.236:53910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971466, "uuid": "639cd031-a602-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.56.235:37796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971784, "uuid": "2135c1bd-a603-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.239:47971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971854, "uuid": "4b1f07da-a603-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.125.156:45656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731971887, "uuid": "5e637a35-a603-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.28.153:55022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972125, "uuid": "ecc8c3fc-a603-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.12.89:43111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972425, "uuid": "9f8ac696-a604-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.74.128:34204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972545, "uuid": "e6b0c1bf-a604-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.78:38923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972614, "uuid": "0fe06db0-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.231.113.131:63143/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972694, "uuid": "3fd742b2-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.96.231:40839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972786, "uuid": "76534f9d-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.227.231:47558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972846, "uuid": "9a2cb7ef-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.235.82:46727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972848, "uuid": "9b409503-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.24.36.30:42465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972908, "uuid": "bf205fe2-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.125.236:53910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731972975, "uuid": "e759db7f-a605-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.75:52761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973043, "uuid": "0fdf1232-a606-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.176.134:44738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973266, "uuid": "949a8822-a606-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.109.137:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973393, "uuid": "e065bd60-a606-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.28.153:55022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973512, "uuid": "27041f85-a607-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.161.216:56931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973529, "uuid": "3162c820-a607-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.4.202:41010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973628, "uuid": "6c141405-a607-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.134.62:55843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973870, "uuid": "fc8d765b-a607-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.60.68:48835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973955, "uuid": "2f44d5c4-a608-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.98.11:46983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731973990, "uuid": "440b296e-a608-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.96.231:40839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731974045, "uuid": "6514f813-a608-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.31.19:37393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921544, "uuid": "27efcbd2-a58e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.105.230", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889444, "uuid": "6b190a13-a543-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.111.55", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926407, "uuid": "7a316a21-a599-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.101.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968283, "uuid": "faacfe43-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.177.207", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954244, "uuid": "4ae6587a-a5da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.109.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926944, "uuid": "baba105e-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.200.220.118", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731955743, "uuid": "c830dd4b-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.152.170.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951246, "uuid": "4fe7370c-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.44.178", "Tag": [ { "name": "dofoil", "colour": "#7f119d", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959344, "uuid": "2a4feee5-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.153.122", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902466, "uuid": "bc88e661-a561-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.227.124", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958211, "uuid": "86dd6dfb-a5e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.246.180", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904684, "uuid": "e68d5872-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.16.97", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904385, "uuid": "346d8cd9-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.59.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971044, "uuid": "686ccc29-a601-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.24.36.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731972844, "uuid": "98c74a52-a605-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.24.36.30", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731907144, "uuid": "a0c74270-a56c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.24.36.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927844, "uuid": "d3295de0-a59c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.232.241.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908107, "uuid": "dec86268-a56e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.232.60.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927305, "uuid": "91be2b01-a59b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.78.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888844, "uuid": "05530ee3-a542-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.114.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920467, "uuid": "a61ca01e-a58b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.83.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935945, "uuid": "af82f746-a5af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.138.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932284, "uuid": "29959083-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.46.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927483, "uuid": "fbf28116-a59b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.123.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949744, "uuid": "d08bb27a-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.239.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962945, "uuid": "8c88c14a-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.214.65", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731890106, "uuid": "f592758a-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.234.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731960606, "uuid": "1ab45a2a-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.226.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961323, "uuid": "c64d6ad7-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.255.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731900064, "uuid": "24c30166-a55c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.237.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894484, "uuid": "26c1b9f1-a54f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.27.35.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898144, "uuid": "ac9f821c-a557-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.74.13.174", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973623, "uuid": "69aafbaa-a607-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.134.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731960784, "uuid": "84ab77cd-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.71.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909124, "uuid": "3cd26b8e-a571-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.28.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731941345, "uuid": "422691cc-a5bc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.9.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910983, "uuid": "914f96c4-a575-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.2.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894484, "uuid": "26c152d1-a54f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.243.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913563, "uuid": "92c634c7-a57b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.3.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891484, "uuid": "2a76d375-a548-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.173.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731930844, "uuid": "cf19d82d-a5a3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.18.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953524, "uuid": "9d4e46a0-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.214.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964324, "uuid": "c291ab21-a5f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.38.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970084, "uuid": "2be7f512-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.56.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889683, "uuid": "f93a0b30-a543-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.94.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903605, "uuid": "63a933e9-a564-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.108.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913144, "uuid": "98fade33-a57a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.109.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731940445, "uuid": "298da7e6-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.27.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731915186, "uuid": "5a68ff6d-a57f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.4.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895807, "uuid": "3b61b2cb-a552-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.161.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950345, "uuid": "36635b84-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.102.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934084, "uuid": "5a43e749-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.137.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731940445, "uuid": "298d6ccd-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.139.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731956644, "uuid": "e161ff9b-a5df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.191.236", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899164, "uuid": "0c75ea4b-a55a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.194.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921664, "uuid": "6fac6959-a58e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.194.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731900364, "uuid": "d7d7e089-a55c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.218.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731945845, "uuid": "bc8e467d-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.37.89", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922387, "uuid": "1e5f89a1-a590-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.133.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926706, "uuid": "2c76e948-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.245.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963008, "uuid": "b21a5d29-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.77.4.165", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952563, "uuid": "60a707ca-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.146.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937084, "uuid": "568a83ef-a5b2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.160.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944943, "uuid": "a30852f8-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.30.241.11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966905, "uuid": "c54e0fb9-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.236.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888244, "uuid": "9f97f358-a540-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.243.33", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949863, "uuid": "17837e1b-a5d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.248.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910744, "uuid": "028fe680-a575-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.136.35", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731919744, "uuid": "f725fca1-a589-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.141.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731893468, "uuid": "c945e8c2-a54c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.160.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888484, "uuid": "2ec9a343-a541-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.207.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918611, "uuid": "53a56c11-a587-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.130.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927064, "uuid": "02012f0b-a59b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.141.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954306, "uuid": "6f8c5c04-a5da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.249.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731915246, "uuid": "7dbd203e-a57f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.227.215", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897251, "uuid": "9843d1b9-a555-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.176.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953524, "uuid": "9d4df6ec-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.18.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731890344, "uuid": "82f7b8aa-a545-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.182.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913444, "uuid": "4bcbda27-a57b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.188.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894544, "uuid": "4a78e3c7-a54f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.20.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905105, "uuid": "e1441299-a567-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.20.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904445, "uuid": "581d33b1-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.64.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943144, "uuid": "72b0a7d0-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.206", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949324, "uuid": "d6278ca7-a5ce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.75.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906124, "uuid": "40e2f841-a56a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.66.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923344, "uuid": "58980eb1-a592-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.73.235", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944045, "uuid": "8bb4fe12-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.100.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892806, "uuid": "3ea71d85-a54b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.103.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894183, "uuid": "73b4c4f2-a54e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.213.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962048, "uuid": "760b0b8f-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.0.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961144, "uuid": "5b60d3c8-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.13.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895563, "uuid": "aa1b3128-a551-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889383, "uuid": "46b330ab-a543-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.29.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923164, "uuid": "ed55f28e-a591-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.39.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891484, "uuid": "2a76e7cf-a548-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.39.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973505, "uuid": "22f4ff7a-a607-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.4.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966184, "uuid": "1781744c-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.4.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731956644, "uuid": "e1629627-a5df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.40.31", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924607, "uuid": "49a4c999-a595-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.7.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895624, "uuid": "ce37ac24-a551-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.80.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908045, "uuid": "b9e4c92d-a56e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920644, "uuid": "0fa4003d-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.28", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906964, "uuid": "35b26ed4-a56c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968824, "uuid": "3cbe8238-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971763, "uuid": "14bcbf49-a603-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731941105, "uuid": "b35c91aa-a5bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929644, "uuid": "03fb7810-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.147", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934144, "uuid": "7e0ce70c-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943263, "uuid": "b932665a-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957544, "uuid": "f958ef7a-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968344, "uuid": "1f0e43f0-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913684, "uuid": "db399b83-a57b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950105, "uuid": "a7cb4318-a5d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904744, "uuid": "0a40c8e0-a567-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731972963, "uuid": "dfbfba8f-a605-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958444, "uuid": "120581af-a5e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.190", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731947705, "uuid": "112b559d-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.202", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910563, "uuid": "96d7c4db-a574-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959344, "uuid": "2a501189-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958269, "uuid": "a9cba5f3-a5e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731900484, "uuid": "1f68784f-a55d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731907144, "uuid": "a0c73c4f-a56c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.47", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908884, "uuid": "adb0c948-a570-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910084, "uuid": "793dd29b-a573-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897724, "uuid": "b2067448-a556-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888663, "uuid": "9992838d-a541-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918182, "uuid": "54174153-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.183.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901743, "uuid": "0dd5191c-a560-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.191.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892684, "uuid": "f63e40ce-a54a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.245.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963844, "uuid": "a4e593f0-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.42.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911284, "uuid": "4497a35a-a576-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.45.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731940445, "uuid": "298d7f95-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.115.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918005, "uuid": "eab1355e-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.139.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959464, "uuid": "71dac381-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.253.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926047, "uuid": "a3d48be0-a598-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.255.17", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731921063, "uuid": "09736454-a58d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.82.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963609, "uuid": "18584c23-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.147.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892623, "uuid": "d1c85077-a54a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.149.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936845, "uuid": "c84b2a56-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.35.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944764, "uuid": "37d7b0dc-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.44.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922445, "uuid": "413944b4-a590-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.50.214", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944644, "uuid": "f072ed5f-a5c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.54.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902763, "uuid": "6da53f15-a562-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.118.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904210, "uuid": "cc29c733-a565-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.124.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968584, "uuid": "adae5d0b-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.131.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903545, "uuid": "3f637693-a564-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.138.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731915069, "uuid": "1460c782-a57f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.34.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892084, "uuid": "905d049d-a549-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.37.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731916623, "uuid": "b2bcda80-a582-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.39.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959225, "uuid": "e34892d9-a5e5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.215.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952145, "uuid": "675dc969-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.73.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970744, "uuid": "b566b9fa-a600-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.74.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927844, "uuid": "d32997e9-a59c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.195.204", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967023, "uuid": "0b9bb471-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.144.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963844, "uuid": "a4e57bcf-a5f0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.192.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951246, "uuid": "4fe74d01-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.194.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731893409, "uuid": "a6017d2c-a54c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.147.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925144, "uuid": "89ba0180-a596-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.2.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961144, "uuid": "5b60e69a-a5ea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.3.138", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965645, "uuid": "d65936a9-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.5.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906363, "uuid": "cf381320-a56a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.107.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924664, "uuid": "6b857cdd-a595-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.114.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731890044, "uuid": "d0a6f1c5-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.114.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731919624, "uuid": "af59bf24-a589-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.124.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908045, "uuid": "b9e471a4-a56e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.173.4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948543, "uuid": "0499b649-a5cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.33.184", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957483, "uuid": "d57311a8-a5e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.56.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731972668, "uuid": "30715b93-a605-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.96.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731940445, "uuid": "298d65eb-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.98.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910744, "uuid": "028fe4fd-a575-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.99.201", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965645, "uuid": "d657ed20-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.205.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899944, "uuid": "dd214e24-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.232.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902284, "uuid": "4fe4229e-a561-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.251.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731942663, "uuid": "53c75c12-a5bf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.171.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931266, "uuid": "cae892ea-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.24.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922445, "uuid": "41393406-a590-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.66.85", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909845, "uuid": "ea9a3c09-a572-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.21.253", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892745, "uuid": "1a59eb1f-a54b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.0.203", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905344, "uuid": "70356267-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.109.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970563, "uuid": "49c6049e-a600-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.12.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966184, "uuid": "178165c3-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.13.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894544, "uuid": "4a78ef51-a54f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.200.213", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927844, "uuid": "d3297319-a59c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.205.48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889205, "uuid": "dca41a42-a542-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.54.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973863, "uuid": "f8b56155-a607-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.60.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731960363, "uuid": "8985f3e3-a5e8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.99.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889505, "uuid": "8f060f1d-a543-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.101.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888607, "uuid": "77b4cb6f-a541-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.180.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920644, "uuid": "0fa41c65-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.7.190", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973024, "uuid": "045fc160-a606-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.176.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898808, "uuid": "3878761c-a559-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.182.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925144, "uuid": "89b9fd5b-a596-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.183.134", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896945, "uuid": "e1bf61e9-a554-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.186.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936610, "uuid": "3baec8e3-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.191.1", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899764, "uuid": "7219ff07-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.22.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731945667, "uuid": "526a5333-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.99.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731939365, "uuid": "a6103bb3-a5b7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.73.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897964, "uuid": "4120dad6-a557-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.82.226.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952563, "uuid": "60a5f372-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.89.252.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894905, "uuid": "22007d3c-a550-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.192.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935407, "uuid": "6eb8dabd-a5ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.252.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943383, "uuid": "013f5a43-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.241.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935945, "uuid": "af839a17-a5af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.15.161", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922445, "uuid": "41391f2c-a590-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.218.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968223, "uuid": "d6fff8cb-a5fa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.14.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918424, "uuid": "e42deec7-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.22.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917044, "uuid": "ad7f773d-a583-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.64.66", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953524, "uuid": "9d4dd99a-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.69.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731913083, "uuid": "74f77a40-a57a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.78.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888963, "uuid": "4c3a94c6-a542-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.231.201.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918611, "uuid": "53a594a9-a587-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.234.160.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "7904a810-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.57.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934444, "uuid": "30b918fb-a5ac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.57.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944943, "uuid": "a30862f7-a5c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.156.89.95", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929644, "uuid": "03fb9a5d-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.76.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953524, "uuid": "9d4e931a-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.220.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896824, "uuid": "99d9e44e-a554-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.87.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731916984, "uuid": "89c6555b-a583-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.139.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952563, "uuid": "60a6bcca-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.191.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731961683, "uuid": "9cc0ce51-a5eb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.193.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908643, "uuid": "1e67e5fe-a570-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.65.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932884, "uuid": "8f2d0ce9-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.167.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920885, "uuid": "9eede638-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.221.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959884, "uuid": "6c43c25a-a5e7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.78.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953344, "uuid": "325a0143-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.51.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "79073a96-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.91.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892745, "uuid": "1a59ef60-a54b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.134.171.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911224, "uuid": "206b90fd-a576-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.163.81.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906363, "uuid": "cf380524-a56a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.172.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909963, "uuid": "310eb45b-a573-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.154.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932944, "uuid": "b28a6dda-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.210.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731956105, "uuid": "9ff181af-a5de-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.245.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963183, "uuid": "1ae253c8-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.158.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968584, "uuid": "adae2e6f-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.44.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "7906af9f-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.60.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922330, "uuid": "fc195344-a58f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.62.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928743, "uuid": "ead8452c-a59e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.132.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951843, "uuid": "b3a07dbf-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.154.196.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906184, "uuid": "648cee7e-a56a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.188.16.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963484, "uuid": "ce2e008f-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.188.16.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946144, "uuid": "6ed0e099-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.213.187.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943383, "uuid": "013f4bab-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.18.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965164, "uuid": "b7b724d0-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.220.106.85", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912544, "uuid": "337646c5-a579-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.191.13.67", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953583, "uuid": "c0e5c733-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.78.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918244, "uuid": "79118b4d-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.227.173.133", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731972610, "uuid": "0d5ace25-a605-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.231.113.131", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895024, "uuid": "688ddea0-a550-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.231.165.62", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889984, "uuid": "ac84b521-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.154.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905344, "uuid": "703566e3-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.156.239", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899944, "uuid": "dd218fe3-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.198.24", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954789, "uuid": "8f7ba6ab-a5db-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.152.147.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936727, "uuid": "81d1a4fe-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.164.248.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731947705, "uuid": "112b0afe-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.127.203", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894244, "uuid": "97a4d20e-a54e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.141.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933963, "uuid": "121bfcce-a5ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.80.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932884, "uuid": "8f2cf79b-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971106, "uuid": "8d0c8ad7-a601-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959344, "uuid": "2a5013c1-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.87.32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970683, "uuid": "913c582f-a600-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.228.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926824, "uuid": "72ecc093-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.82.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968705, "uuid": "f6124326-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.93.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926706, "uuid": "2c76502a-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.218.114.67", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952563, "uuid": "60a62347-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.244.214.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957723, "uuid": "647654b6-a5e2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.92.21.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959344, "uuid": "2a5023e4-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.87.0.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971884, "uuid": "5cbd3843-a603-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.87.28.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922505, "uuid": "64c4fe30-a590-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.103.151.204", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731916866, "uuid": "437c6efd-a583-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.170.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946144, "uuid": "6ed0f3f2-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.70.231", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951131, "uuid": "0afaaa8d-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.191.81.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933784, "uuid": "a78643f0-a5aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.249.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731940683, "uuid": "b7aa61e6-a5ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.237.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917884, "uuid": "a23ed3c8-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.50.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962283, "uuid": "027ec8eb-a5ed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.77.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902344, "uuid": "73c18da6-a561-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.78.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923763, "uuid": "52a74bf1-a593-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.158.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731969008, "uuid": "aaa32920-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.49.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963484, "uuid": "ce2ca988-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.55.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918964, "uuid": "264e169d-a588-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.83.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731893763, "uuid": "79199687-a54d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.83.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950763, "uuid": "2f836ecf-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.214.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917044, "uuid": "ad7f90b6-a583-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.195.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935044, "uuid": "96bd4287-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.83.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911883, "uuid": "a9c195ca-a577-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.177.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906243, "uuid": "880c1edc-a56a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.143.73", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731927305, "uuid": "91bedb23-a59b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.184.20", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970144, "uuid": "4fe60e47-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.12.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898144, "uuid": "ac9f90e5-a557-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.166.210.252", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966724, "uuid": "59822d39-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.4.224.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920223, "uuid": "14ce5f8b-a58b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.92.132.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950705, "uuid": "0d49d6f9-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.170.144.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949744, "uuid": "d08b937e-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.222.57.90", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731918424, "uuid": "e42e03d9-a586-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.248.15.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936845, "uuid": "c84ad2db-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.99.5.249", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892864, "uuid": "61327815-a54b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.189.3.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905344, "uuid": "70351579-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.189.39.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951606, "uuid": "261a6259-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.182.153.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901024, "uuid": "61182d54-a55e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.59.84.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731890044, "uuid": "d0a701a6-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.243.225.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953524, "uuid": "9d4e6871-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.248.230.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894484, "uuid": "26c14003-a54f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "208.168.244.9", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731960124, "uuid": "fb2d0317-a5e7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.242.49.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906543, "uuid": "3ab5de60-a56b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.188.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950705, "uuid": "0d494c3b-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.235.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928743, "uuid": "ead8428a-a59e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.91.234", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968584, "uuid": "adae5276-a5fb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.21.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908943, "uuid": "d14f544e-a570-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.36.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938763, "uuid": "3f7d61ed-a5b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.163.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "7908a7d4-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.189.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914824, "uuid": "8264b6fe-a57e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.225.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909124, "uuid": "3cd1ac95-a571-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.6.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903006, "uuid": "fe23e0be-a562-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.92.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731959464, "uuid": "71dac83f-a5e6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.214.158.94", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952743, "uuid": "cbfaafa8-a5d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.214.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920885, "uuid": "9eedd83f-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.156.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910024, "uuid": "557ebc30-a573-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.158.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928323, "uuid": "f0a1711e-a59d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.236.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904445, "uuid": "581d0b00-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.183.204", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731909906, "uuid": "0ee4d41c-a573-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.185.157.12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971106, "uuid": "8d0cd481-a601-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.220.238.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731900608, "uuid": "6950a335-a55d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.110.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908045, "uuid": "b9e4b10d-a56e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.110.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964806, "uuid": "e23b56d3-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.41.156", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951606, "uuid": "261c2426-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.14.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891844, "uuid": "01634c60-a549-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.62.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932224, "uuid": "05a7a0f8-a5a7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.89.156", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731934807, "uuid": "095e7dfc-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.74.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731924244, "uuid": "713fe75f-a594-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.157.145.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953524, "uuid": "9d4e74f8-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.235.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731906543, "uuid": "3ab5da1c-a56b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.100.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937206, "uuid": "9f58aebb-a5b2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899584, "uuid": "069fb6be-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892323, "uuid": "1efbb3f4-a54a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966062, "uuid": "ceda02e6-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973264, "uuid": "9339d969-a606-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.109.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910084, "uuid": "793ddab2-a573-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929883, "uuid": "929f2cb4-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964384, "uuid": "e65f5f51-a5f1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928207, "uuid": "ab1b32bd-a59d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.181.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953344, "uuid": "325a3f45-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.182.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731908464, "uuid": "b3740be4-a56f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.183.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898506, "uuid": "840b32ad-a558-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.211.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891305, "uuid": "bfc73dca-a547-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.193.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731901743, "uuid": "0dd514e1-a560-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.208.191.250", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966184, "uuid": "17817d1e-a5f6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.210.121.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902344, "uuid": "73c17cf5-a561-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.140.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910624, "uuid": "bb1acd19-a574-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.81.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "7904c53c-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.63.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731893409, "uuid": "a6015c7c-a54c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.140.194.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946263, "uuid": "b5b67388-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.56.7.159", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950645, "uuid": "e9776c37-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.204.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731942184, "uuid": "3632936a-a5be-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.137.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731916924, "uuid": "65ea8100-a583-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.31.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731945906, "uuid": "e083ba33-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.169.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896945, "uuid": "e1bf6698-a554-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.10.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912964, "uuid": "2dbd9348-a57a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.203.68.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899584, "uuid": "069fbd0f-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.196.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731915543, "uuid": "2f2c1e58-a580-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.215.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731893645, "uuid": "3313c548-a54d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.89.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903844, "uuid": "f1ae05aa-a564-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.196.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912664, "uuid": "7aea49b1-a579-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.68.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905283, "uuid": "4bc4d338-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.244.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971106, "uuid": "8d0c89a2-a601-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.223.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899584, "uuid": "069fc46d-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.187.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731972783, "uuid": "74c561f4-a605-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.227.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914344, "uuid": "6445d75c-a57d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.174.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967444, "uuid": "067d3816-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.68.248", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731957844, "uuid": "ac4c783d-a5e2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.92.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922924, "uuid": "5eadad3c-a591-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.161.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933424, "uuid": "d1016d8a-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.186.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926944, "uuid": "bab9f329-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.55.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "79071c30-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.131.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731956283, "uuid": "0a1d9443-a5df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.172.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937744, "uuid": "dfd421ef-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.115.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966124, "uuid": "f3a8677a-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.18.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903244, "uuid": "8c19802b-a563-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.224.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731923164, "uuid": "ed55ebaf-a591-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.202.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731952205, "uuid": "8b4609e4-a5d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.88.236", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891183, "uuid": "77503617-a547-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.157.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731912844, "uuid": "e61bd575-a579-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.33.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970144, "uuid": "4fe61461-a5ff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.172.113", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950345, "uuid": "3663815e-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.201.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917944, "uuid": "c5d7fe11-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.230.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967563, "uuid": "4d615cb0-a5f9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.114.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731941164, "uuid": "d655b625-a5bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.109.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898506, "uuid": "840b1f8f-a558-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.189.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731930663, "uuid": "63328e93-a5a3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.125.66.89", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897011, "uuid": "094cb303-a555-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731916204, "uuid": "b94a94c9-a581-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.42.44.94", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943206, "uuid": "977fd7f9-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.217.188.73", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950524, "uuid": "a14f0069-a5d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.104.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731919206, "uuid": "b60aaab1-a588-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.11.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943810, "uuid": "ffae6c68-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.59.154.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935044, "uuid": "96bd59a8-a5ad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.59.154.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731928085, "uuid": "626521fa-a59d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.144.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905406, "uuid": "951b02fd-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.213.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964506, "uuid": "2f0dc79b-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.75.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731922330, "uuid": "fc191bfc-a58f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.143.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889263, "uuid": "fed5106e-a542-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.76.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731893527, "uuid": "ec6c1875-a54c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.76.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904445, "uuid": "581d1cbc-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.90.241", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905406, "uuid": "95156ee6-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.90.254", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973924, "uuid": "1c8f1d51-a608-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.98.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971106, "uuid": "8d0c7365-a601-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.119.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731960965, "uuid": "f0764a49-a5e9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.174.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967144, "uuid": "53871e2a-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.240.22", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731926944, "uuid": "bab9ff6c-a59a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.245.13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731937744, "uuid": "dfd4414e-a5b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.246.120", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943744, "uuid": "d7d769a8-a5c1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.246.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731905524, "uuid": "db3578f0-a568-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.250.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731902223, "uuid": "2bea417d-a561-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.251.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917643, "uuid": "12c73224-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.254.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731955924, "uuid": "33b341a1-a5de-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.255.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731904507, "uuid": "7d0a00e2-a566-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.55.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962048, "uuid": "76080aac-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.15.145", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731947705, "uuid": "112b29db-a5cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.224.134", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896465, "uuid": "c39a6b04-a553-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.232.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917944, "uuid": "c5d7e22d-a585-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.234.230", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731914584, "uuid": "f392d794-a57d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.1.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731920944, "uuid": "c249427b-a58c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.198.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731943206, "uuid": "977f4355-a5c0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.6.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731894544, "uuid": "4a78de7d-a54f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731966844, "uuid": "a0b28f35-a5f7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731945906, "uuid": "e083d644-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.95.254", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895684, "uuid": "f21f7ae6-a551-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.211.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731888424, "uuid": "0af1b15a-a541-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.112.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963484, "uuid": "ce2d5abc-a5ef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.113.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944045, "uuid": "8bb567bd-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.117.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731907144, "uuid": "a0c71196-a56c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.120.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731895863, "uuid": "5d034080-a552-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.123.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936906, "uuid": "ec5116ca-a5b1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.127.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731968764, "uuid": "18eb6c6c-a5fc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.135.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731892383, "uuid": "42c61791-a54a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.196.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731953463, "uuid": "790a0e88-a5d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.179.249.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731889144, "uuid": "b814bbcd-a542-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.40.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950705, "uuid": "0d493884-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.6.77", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731954006, "uuid": "bc8747d7-a5d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.12.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731896224, "uuid": "340caae4-a553-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.149.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731946263, "uuid": "b5b66add-a5c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.15.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731925206, "uuid": "ae93a5d0-a596-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.9.31", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935945, "uuid": "af82d71e-a5af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.227.103", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731955205, "uuid": "875e9b73-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.235.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731955684, "uuid": "a4a315c7-a5dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.246.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731955084, "uuid": "3f451029-a5dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.168.53.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731963008, "uuid": "b21a7060-a5ee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.68.173", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898384, "uuid": "3b6f18f8-a558-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.103.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898924, "uuid": "7d57bc57-a559-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.128.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897843, "uuid": "f9261ff2-a556-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.128.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731917044, "uuid": "ad7f83d5-a583-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.133.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731942246, "uuid": "5afd4ba4-a5be-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.134.246", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731973505, "uuid": "22f51082-a607-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.161.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903183, "uuid": "67dc3c2f-a563-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.170.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731910144, "uuid": "9cf3cdde-a573-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.24.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731898264, "uuid": "f3ccecfe-a557-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.96.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731971106, "uuid": "8d0cfd19-a601-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.158.165", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731929883, "uuid": "929e549f-a5a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.228.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731891125, "uuid": "5496d9b1-a547-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.141.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965408, "uuid": "48c00f60-a5f4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.152.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731970865, "uuid": "fd8e1306-a600-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.34.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731903724, "uuid": "aa31b91f-a564-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.74.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731949505, "uuid": "41f5137d-a5cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.167.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731931266, "uuid": "cae801f0-a5a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.187.200", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951010, "uuid": "c2fa3cc0-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.187.231", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731899884, "uuid": "b971c51e-a55b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.26.81.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950705, "uuid": "0d494342-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.192.37.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731948843, "uuid": "b7907ceb-a5cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.209.133.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731964806, "uuid": "e237a69f-a5f2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.34.230.76", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731890046, "uuid": "d17d9193-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "8cdf8.language.sebtomato.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965823, "uuid": "404a89b1-a5f5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.162.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731950705, "uuid": "0d4932cb-a5d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.177.151.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967324, "uuid": "bedfaedd-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.32.50.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731890045, "uuid": "d0be7c9d-a544-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "cms.events.socalpocis.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951665, "uuid": "492435d6-a5d4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "end-vt.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731933186, "uuid": "4322ace4-a5a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "german-multiple-reunion-foundation.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731951188, "uuid": "2d239179-a5d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavyequipmentsales.au" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967384, "uuid": "e2bfe2f5-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "inayatullah.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731897253, "uuid": "999dcc83-a555-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "mbw.events.socalpocis.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731962163, "uuid": "bafb86f7-a5ec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "ndur.events.socalpocis.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731936424, "uuid": "cceff971-a5b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "ni-olympic-forests-invoice.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731965165, "uuid": "b7e38c0d-a5f3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "panel.chanbaba.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731967384, "uuid": "e2ddefe0-a5f8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "petshopsg.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731935707, "uuid": "21a102d3-a5af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-62d5cdf3fcfb4f1a97de07d140c6faa6.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731938284, "uuid": "21f7e15d-a5b5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "ready-bathroom-carter-membrane.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731945906, "uuid": "e0cece58-a5c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "rigzuvzi3bnz3.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731911765, "uuid": "630ce94f-a577-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "storageinstance.oss-ap-southeast-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731958564, "uuid": "5988d140-a5e4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "tuw.events.socalpocis.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731932646, "uuid": "017e16e7-a5a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "ump911.b-cdn.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731944109, "uuid": "b16d5024-a5c2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "youxj.staff.plenarykcg.com" } ] } }