{ "Event": { "published": true, "date": "2026-09-20", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-09-20", "timestamp": 1789949720, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "8deabb87-8037-4037-9268-eef7b2b8a8b6", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e00ef612-b488-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789863539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863539, "uuid": "fbc0ee32-4331-4b34-9104-4ea45871323c", "comment": "Malware payload (Mirai)", "value": "b3fee5c1a2656de42c1419803d789302", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863539, "uuid": "a57290f8-79a5-47bb-9797-b763ae23b645", "comment": "Malware payload (Mirai)", "value": "ebda7223e96734d3c2c93e06909fad15006e0f938003b4be57d774ccaa7f3c98", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863539, "uuid": "47939491-0553-4cd1-a33d-e0b02858416f", "value": "T15F14236F4B199C40B80359BD7447407687277BCCC26B6C7DA44DB0C5AB8296A6ED08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863539, "uuid": "626a048b-1ab6-4c4d-92b5-d5bd9deef422", "value": "6144:s8upyPeeg4aEedBf2xzylh6z8YPX6m13k:s8u1pB92xzyLRWO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789863539, "uuid": "764fdfaf-6d93-43eb-9a76-c5d6b3191dc6", "value": 198700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863539, "uuid": "1c91de53-ff6b-48a9-b91a-973fa6aa6dd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1789863567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863567, "uuid": "c48100e6-73a7-4f8f-be5b-44455e43a98e", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863567, "uuid": "2b46f854-0d50-402a-ba07-24f526ab98ef", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863567, "uuid": "9cf44411-5170-4912-b250-1f86c7e74154", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863567, "uuid": "cdd46042-f0d4-4d50-b748-730d5101f469", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789863567, "uuid": "212ab1f0-e895-4689-bd25-61183c2a0ed2", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eceb79da-b490-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789866996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789866996, "uuid": "55a14f67-ad34-4f35-ab19-669730eb5cc5", "comment": "Malware payload", "value": "7476ed6b27219f49d51f04197fbb3852", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789866996, "uuid": "638d7778-057d-4f1e-8a63-21bb65541386", "comment": "Malware payload", "value": "286676a076a2747544267957e7e2b1ffd9a2c77692a7e99905520231b2aaad2c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789866996, "uuid": "42180a92-cc32-47c8-89af-ef83c9cf0490", "value": "T13716338C3A8599E5FD9D6931F25B071BB81FD33324AC02C68A4E4A45D74C5F1F9AE8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789866996, "uuid": "0b7caeec-b5d7-4e57-b051-4537e5b9a0eb", "value": "988a8244c72195b4bb8a0139a4adfc0a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789866996, "uuid": "67a5cbea-76a2-4209-bc97-09cfc685d60d", "value": "98304:9MfgqFLpXK1EVu4f6VNthL5zIUt/JaYtfoc:9WgKM1E3CthL5z1fo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789866996, "uuid": "88cd539b-a78c-4ffd-a958-bfa32ad218e1", "value": 4185600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789866996, "uuid": "8a685592-ffdd-4aa7-8c4e-4f8b44ce8197", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1789867887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789867887, "uuid": "110833fa-0663-4ebb-adab-9e7d4e8713ef", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789867887, "uuid": "cbc6c101-9c46-4f2b-af32-885cd0cb59f1", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789867887, "uuid": "12f99be5-ea9e-41d9-9936-2609ad36421c", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789867887, "uuid": "0c625856-9c36-46df-b320-fc7e324dd590", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789867887, "uuid": "d8d00197-42ca-4a34-a436-810b207f5fba", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1789872325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789872325, "uuid": "4cc65174-5c55-4174-83f2-1c3d3b970f9c", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789872325, "uuid": "adb253f5-7853-400f-ae91-3f00a303763d", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789872325, "uuid": "35ba408c-0181-48a5-815a-ae86855fc96c", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789872325, "uuid": "0b29de64-1ebb-4692-81b1-e6518deeabb0", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789872325, "uuid": "e1beb3fe-bc6f-4c84-9a77-7ba8492e5bdd", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ed32ab8-b49f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789873200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789873200, "uuid": "33f857f4-1ef2-44bd-8362-a5fa442ae966", "comment": "Malware payload (Mirai)", "value": "03eb5f3f227b7e16da6fef17fe5292bc", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789873200, "uuid": "db365605-805e-481b-8e69-4e032db6771f", "comment": "Malware payload (Mirai)", "value": "c034e24c7e9ed3926e523998f2f8f485262b15c8a56b802bee1c48a6f2a48630", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789873200, "uuid": "04fe38b3-2922-4e79-ab31-21259fd64760", "value": "T1C444221D46BBC330F4BAED3A2564A1A09F0097F4A5F8AEF272D2215416EC5E39FC46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789873200, "uuid": "a2855b05-4923-4b48-b110-cdf995086921", "value": "6144:0cySvCXf5TbOGpk02yi9cdsbzsm+PKxs8HpqXRVhOqCuS56pXmdFoQ:0cT6FbSEilbzfGKxxpihCTMXm0Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789873200, "uuid": "8ecc0aa9-ddcb-4a93-93ae-ee290ae83155", "value": 269048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789873200, "uuid": "52104f32-61b0-4835-81ab-3c842c133645", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ba3d9cc-b4a3-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789874940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789874940, "uuid": "9cb07eda-1b2f-45e3-8df8-aec1bd0d902c", "comment": "Malware payload (Mirai)", "value": "c3df40ff4e0042e2a870832d1dfecb7c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789874940, "uuid": "35687e00-55d8-458b-bd02-cc6decb9abe4", "comment": "Malware payload (Mirai)", "value": "b793206d6e320eec11d3decf493fc77776e3635df45dbd4abc95fad910db6482", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789874940, "uuid": "b01490e0-97e7-4cfc-b746-8fa9efd2b9df", "value": "T115A4BF32C0B59DE4C473A371BCB5DA704B22644492A71DF3A7DEDA590893ED8FB097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789874940, "uuid": "87670819-2ae5-46da-8400-6e9764b0e2c5", "value": "6144:6+c3SuI60zYS9tldsiNMZIgYJfw4VgWqJHYa9IzVSewMW4S:6+ASuUYUtla9ZIgYJfwzJYa9IEp4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789874940, "uuid": "a6672358-4a54-464c-aa5c-ec825bf9343e", "value": 464488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789874940, "uuid": "39ab9492-769e-4077-a1ae-27c9a08a30da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "295160f6-b4a7-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789876547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876547, "uuid": "2897a86f-1f39-4203-a5c4-6de35ec0f8d5", "comment": "Malware payload (Mirai)", "value": "ceae526c2e96342dad1893ffb467c042", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876547, "uuid": "3264d27c-89e4-4549-9afb-5477f3585e8e", "comment": "Malware payload (Mirai)", "value": "aa85be63909ee5345ed04d0c6362b70a669d862d38f96079df0dc0359d00dd42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876547, "uuid": "1c5cbae1-899b-4da1-8623-acfb13ae30cb", "value": "T15BF2E195228D707681E0ACB3D47087F02D7A01B7D4D973A15FF98248D58A722E87BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876547, "uuid": "5911e16f-366c-48a9-b122-0b6c20f9c666", "value": "768:7rFs5me135wp1C+s9vbM5YNMygu+OR1juP3ACqtqNLIzLtZ6Ggt7vtHH4s3Uozd:7/eRSnQjMgVuP7qtqxgtAbvttzd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789876547, "uuid": "9fa8aa21-9fd6-4be4-ab58-f6a0636f3542", "value": 36840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876547, "uuid": "bdd12c5b-1070-4f78-a7be-d1c3bef3f95d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9915352-b355-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789876606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876606, "uuid": "4291d74f-f425-4ac6-a250-bf973651c137", "comment": "Malware payload (Mirai)", "value": "3b9711a9de8e630d5f74a8be2e7a7c7a", "object_relation": "md5", "Tag": [ { "name": "docker", "colour": "#74eb76", "exportable": true, "hide_tag": false }, { "name": "malware-download", "colour": "#713933", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876606, "uuid": "cd964de3-b577-411d-a814-6a912bbffa64", "comment": "Malware payload (Mirai)", "value": "d12cd0ac7f6d8b48c3422c5a0c4a1d232109d995433b0a295935b951fab2fd28", "object_relation": "sha256", "Tag": [ { "name": "docker", "colour": "#74eb76", "exportable": true, "hide_tag": false }, { "name": "malware-download", "colour": "#713933", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876606, "uuid": "43fcb4aa-d72a-453f-9315-23fb79b3d50e", "value": "T1B7157D1AB2E2F4BCD05BC030479FC6725531F0B522312E7F36C59A352D6ADA1276EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876606, "uuid": "30b86880-f652-436b-b1c6-cec04854797f", "value": "12288:gbygxNeLMjvse3vihQ9iNgXgv/wdrHn3Y6Iaqlxziayf2EnRHXj:YygxNeLAvx14NgXODaqlxfQJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789876606, "uuid": "cd464640-0057-4b9c-817f-902a38dd5ae7", "value": 881248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876606, "uuid": "08d99030-764a-49d5-9b74-cc57a64d3507", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f836529-b4a8-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789876986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876986, "uuid": "89e5269c-452e-4993-b1bd-316ba705660f", "comment": "Malware payload", "value": "6e1eed309f91ceb4841612062a5220b2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876986, "uuid": "21ecc314-faa9-4127-b1d7-a44e2afe37e7", "comment": "Malware payload", "value": "aa9ab8fe7c5f44f6f6d0f2e46abea8dfbca89f3e8b1ec4a2cf3dc9fb44db0c98", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876986, "uuid": "426fb949-186a-4ed0-a43b-80ad76b2754c", "value": "T1C3C17376B804CD4AEC21BE4A103EBE3A58CD843B46A5DD7C66DCCE0502429BE2F91D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876986, "uuid": "1a1db8f9-1cca-45b4-8a5e-be467b071935", "value": "96:ERyHMPONJmYosLvnK0ggLcCbJ4eLl3c32XljT7cg1xqzcfxmFfE/qclIKEoouW:bHUONHomndRq2ygnqzcJmp6ZoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789876986, "uuid": "a0ca175d-47cf-4182-a1df-2e66616f9721", "value": 6008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876986, "uuid": "5a8b98e0-faec-40a8-96ce-9e76a8930f64", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4962341d-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877459, "uuid": "3c688b28-bacf-4a9e-aabf-73c970189e6e", "comment": "Malware payload (Mirai)", "value": "0ae7b58e375fe5606f5f11de3779b851", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877459, "uuid": "886d3296-bd22-4fa7-abae-d56cfc81867b", "comment": "Malware payload (Mirai)", "value": "e65a3387fe886951238a8db1bba23a51bd41b917bcc6cb936232519018d622a3", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877459, "uuid": "c96a49a3-eb3e-4d3d-a759-e13adfdb13a4", "value": "T1C4342354EB475CEA41428D993829F8F0D017FF58458E5896FB5CDBA4001768F3AE0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877459, "uuid": "aa43a7dc-a467-451c-8a9a-0bcbed73c6fd", "value": "6144:FxYPRsqkdo2tvNS4ybyi8LuCKLh+oo1OV95LL:Fx2R52o2jSxvCKF9V9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877459, "uuid": "0add7239-481c-4fcc-b5b0-c81c55d0499c", "value": 236060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877459, "uuid": "4328baef-96ae-410b-b3e6-ff027c6eb016", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "731ccf1a-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "666582e8-250e-4e54-939c-c7cb78660eea", "comment": "Malware payload (Mirai)", "value": "f11fd2d74b7e7af9139e74df6beef0f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "4a3bd8c2-6874-4a8c-bba5-07cb92941054", "comment": "Malware payload (Mirai)", "value": "0237044d214277a844e26964c532ecf35809c6e915cd8761518112c8f9f889ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "0bf9b592-70ea-4ac3-9acb-b09034e80eba", "value": "T1F5C2F7FDF512A9ADF84EFB3EC401410D7A70A72550411A7537AAA937DC333A8193AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "ab0ce3eb-e547-4348-8225-14b0f1a41bcc", "value": "384:KPda6gfFNg0fPL7WAlJFLMhOmJpcFuSZ8HAp3KV7Khb26oNuIkfabiQcws:KVavfFfLW8FuA8E3Kkx26kuIkf+idws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877735, "uuid": "35565bfb-903f-44d7-ab25-6a0a1c9949e3", "value": 26456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "430021e0-84d4-44db-9a4e-978891d83c0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ef48d64-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "7780c989-c562-4b4c-aebd-11a62a109e4d", "comment": "Malware payload", "value": "d97e15fbf01ef8a88b822f1165b4f452", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "055c7f6e-5e3b-4698-a147-77c9a280c8ba", "comment": "Malware payload", "value": "27645ad46b92759d28f03b4ab1b3de90dd887b29d212669575e8047f76a87e07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "b21fc326-ef34-4c49-bb18-70e3210700a9", "value": "T19662AE24E3496991EB7A8DB3AC6CC7D17BD007993F91FCD13229DFC006126166A74D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "a28912fd-de05-4153-a40f-2e0d0dc4026c", "value": "384:Y+vJKB73CyEXOQNgqAmWXan3wiM4uVcqgw0OLM+XA:FvJKBey1nLIwZ4uVcqgw0t4A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877735, "uuid": "983f569a-2133-4717-821e-8fabd0f426c6", "value": 15196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "3eb3ef57-5d49-48ee-8d0b-04ddfee3f35c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a323def-b1ba-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "c4275ae1-a2bf-404d-bbf4-a2a557855873", "comment": "Malware payload (Mirai)", "value": "13d2ea5ce61708df5653511e330b9c15", "object_relation": "md5", "Tag": [ { "name": "94-154-43-83", "colour": "#313bb3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "9cf8016e-f08d-4764-96f1-8e33f9d70b4a", "comment": "Malware payload (Mirai)", "value": "0736007a31e212eddfcdb48b0785c9d241da739fe9df9c68ed2b05255815af6a", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-83", "colour": "#313bb3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "7741abf2-d8ef-456e-9a71-7672f63199c6", "value": "T1ECB24C86FD414917CEE11136FA2E828C37654BB4E2EF3307AB271F742746A1A0F365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "732ff3f0-ceda-4475-8ed1-e4a89ba25e06", "value": "384:Ja1e4fKt9Jz2Skeb1TGdAy31p1mSn5eP5BTM60XFx4eK:JSePRz2S5NGWi1PRgTM6t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877735, "uuid": "2a2800a1-1512-433a-a26f-23737abdeb75", "value": 24596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877735, "uuid": "63defc06-71e4-4eae-ba07-58617933fa7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "732591f5-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "c8c0a370-f38a-4a36-9321-3c565ebc5fc5", "comment": "Malware payload (Gafgyt)", "value": "42c30558a583560282ca9b8cc519801a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "bbe66774-6bb4-43b9-aeb2-fae9cc79d3f4", "comment": "Malware payload (Gafgyt)", "value": "3ac187f6587892fb72dfada22df5a4a1cef577a247e72c9f39e487418e56ae1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "9218dcc4-5311-43b7-8dd2-a7d53dafcf70", "value": "T12FD21A3AEB724913C4D499B895F3832CB9F9425F647D4A163C6B0EC4EB91AC06113F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "e812f5d1-abe7-419d-93bd-3cff60358108", "value": "384:6ysT8AllDko1OxoUmdKzN57tSezXasmFFU+pph1K7R2d:6ysTZ3OxoHqBNeO+3K7Ed", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "5532cb5a-5d7a-4093-98fc-cf9081b856ec", "value": 28836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "e6e68872-9573-47da-82e0-d9ad280eb2f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee09c908-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "6734e2a9-2614-4e5a-9955-69ae5bc253b3", "comment": "Malware payload", "value": "45dfd9004cc16c57385e68cd5029bb7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "d671d37c-2878-47f4-8a17-4cff2a1222f7", "comment": "Malware payload", "value": "c3f4b8833424d58313c09bfe519126396cef6a49746fc8630dfa667ea82a77c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "8fd23f13-796f-440f-84c1-24e7a954c598", "value": "T1C092D169458AB151CBB20873D8AE064697C733F8E06EF2633F581E8CBD5110BA9FC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "5b81d3ea-d8d5-453e-ab8d-8b9e6670b0bb", "value": "384:WkbADrcNtkHnX8h182qlXErXyX0gdi2aj4CFhNI5LNXqmdGU57ptVGq8rsc5:tbyrbHMh62qaypU204C/+tNXq3Uirv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "01428e30-d7be-40ed-ae6b-2da4c6c45677", "value": 20844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "fe0dcf6a-3cdf-4fb6-9a86-deb1e59f5ef5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7311700a-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "2b6dc706-085c-4480-90e8-5250dbc019ec", "comment": "Malware payload (Mirai)", "value": "91c84c89b3d51f80b97366a85ad4db48", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "1e503ef4-4fb7-4c1e-894a-787b7d427631", "comment": "Malware payload (Mirai)", "value": "dbf900b4fc1eea74fc110b859a02297cd7490de7a29a7538f44a5092117fdb29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "b19d370f-6061-4183-bc26-dc97ac56db31", "value": "T18862AE6C6A0612F3D866547313AD07402D790FFAEA03CC57199DA9D3E90A4F960C32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "eb146f19-a05c-4878-bee7-e13653abef0e", "value": "384:GnxMbDo/EqEFZTOfQyT53A4jJgGlzDpHbKYwrJDsV2c:ixg8vEFZ6Ty4JgGlzDppMgv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "2ea53298-e881-4245-bc8f-1197aa4062c7", "value": 15948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "8780ee22-5dc6-4a94-bab4-f61aec0cc2a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee0f12f0-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "0716e042-d501-459b-8936-eb90ed53c669", "comment": "Malware payload", "value": "76cc63f4163f840d50a65ae5b970eb85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "058ea715-ac1d-46c0-ad58-b3fa70b98e6d", "comment": "Malware payload", "value": "a039db61b06d137895143157fd05718e9603bd9c1470fac58856972c1064515a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "4643cd6f-4ab3-48dd-b3f6-5218a4d8ffd7", "value": "T164B2E10C472BDE64EA740CF3FC298947E1D316F8E0B5B0A56B50DA9C210388DE3F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "f291ce82-bad0-4d2d-8d27-90a43889d419", "value": "384:lHaclmsCHKEV0xms/0ZVvYYhY+awkxAeqLqW+lOw3utq06zPIntpBKNEeqmdGU5c:lXlGHKE++/vYY0C19CVzmpeq3Uirj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "077d746d-dec2-4a1a-befc-2f678f79dcba", "value": 25412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "ba225003-c058-4558-98ed-637f9dd82174", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee15d746-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "0e7f38d3-fbb5-4baa-914e-7995e2b54cad", "comment": "Malware payload", "value": "de092f4c2b579a6f49ae1f71a6a52bd0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "64f26f45-0ee6-469e-97c9-c1c2b873e947", "comment": "Malware payload", "value": "40f09e69d334c5b951edb85ffe8b81e03ab4ff7db5d408add95aadc35b70bf13", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "63731d4c-6b2d-436b-96d9-9aa514c3705b", "value": "T13972BF91FAD2CE5AE29D81B305DE7D0A1818F01EB4C904E73958A073AC26BDC2D5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "c051dd97-9e6d-4d1f-8e75-ac0bf4434eba", "value": "384:MEBjc293aM7zPwWMjfXVcFm5vqiffD3vtGmNSANaNJawcudoD7Uq/80:BBgua6rwWMbGm9qiD3vt5snbcuyD7Ub0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "b4e2cc7d-9ce6-4411-9087-654f61f54c9c", "value": 16232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "d07682cb-a9c3-4e00-99f0-2b4790ae7fbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6929bef5-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "95c7ba62-548c-469c-8739-0ae9d0f39d8a", "comment": "Malware payload (Mirai)", "value": "cc354e0cd2cfde3c80a17ead892ea48e", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "2646dd17-6092-448a-b485-239bac2600e1", "comment": "Malware payload (Mirai)", "value": "f3f4cdd0e555489d531a3bc837e0cb26e20db5cdbeabc4e8dcdcfffb32f4fefc", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "41061d68-1b09-4ebb-8036-114c89ffef85", "value": "T136A3121EE6F74A40D89A3F35246D412D0045AEC6D2FD27CFEFA92A930D4720E7E119", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "a06f58a0-d356-423f-8316-6a1cfb64ef6b", "value": "3072:Il/hxplyOm4AkAC1uxiJKQZfWKcM0C+aPB4yaAzS9:YTE1kFSsfJcLut4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "fdbfe0ab-7db8-4b4b-96ba-84d8bb07a4a5", "value": 100996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "3b5e7974-e180-433e-a85e-004b5c665c65", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6910579b-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "8073d732-8b25-432b-941f-66441912c22b", "comment": "Malware payload (Mirai)", "value": "22e16ace2780fd28042b08811f2e22fd", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "70f624d4-61c9-470c-9e3c-b761c28ea620", "comment": "Malware payload (Mirai)", "value": "48b176789f1fd7e7b9ea7cb0c389e145b59e46fa56b29c2d3b31f5cd7e56e93d", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "aa20a429-e073-48d7-b5eb-58d674e411a4", "value": "T1EAA3127ED8969740F12D127E96E8B7160F5086C0D0ABE9172C96F9C7650F0AC03AED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "57e1037d-6591-4c11-8bc9-3bcc6b67aa39", "value": "3072:iMXXH2/eGYKfFuu8BR5E6KvrJNpeC1UygyA5k:iMXXH2/e3b3R5EhNUwUhyAO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "3fe34acf-f270-44ce-8604-c4778dff7df7", "value": 99552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "75f8dcf2-1455-47d9-bbc5-6221a24fa9fe", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee1ff202-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ab926a30-2d1a-45b4-abee-4019f7427dbf", "comment": "Malware payload (Mirai)", "value": "df41ea81376596fc9b137e2eba1eea6d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "e400d729-1754-4556-ae05-d0b4219c0676", "comment": "Malware payload (Mirai)", "value": "3e1b90ccb649b66a0c30fa535e5380f3cf182a3b5e75533afda91f69a6218f7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "fc93d25a-f7b3-47f7-b8c4-70aefd288c75", "value": "T1F5C24C86BD814917C9D6117AFA2ED18D37665BB4E2FF3303A7265B702743A2B0F364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "9e77e51a-1487-49f8-a07e-5096e118fc3c", "value": "384:jJSTLfrQ++VB90NEevfnQqPTXTQDAR6dv5kLoMB9Ie0fFx4e:jGnL0m9fQqbXTA8oc9Ie1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "95ad1048-d867-4065-a4fc-f1c34394bb36", "value": 25808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "ccd9d813-43d0-4dee-8568-52d1c4ed0b48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7317d0d1-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "d4870496-377b-40e2-b51d-2725e68e3aed", "comment": "Malware payload (Mirai)", "value": "3cb8f60f74ee3980ad458959b41eb283", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "d66ffbf9-933d-4d1f-b3ec-55d45a0657ea", "comment": "Malware payload (Mirai)", "value": "ec3fdde77782f1e6909e5d9a2fe1bbbbca8f08cc2633500f3c237277efbcfcc0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "7f5d11de-035f-49cb-8e75-2f12f2479bc0", "value": "T17AB2E0A2A296EBB5D06C7A76C85DC10D2D88047DE17F74A1383A97A591C354673FE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "600f52e9-ab1a-4929-ad8b-f355b82f7e4f", "value": "384:ZuUXL23Br035icrUMV32N1JgG50XU7vzx0mduygu0CfsemgrDXzuqu9USdOvZ1ta:IUXK3Br035X2NzMeLdu1ejXzPvDX3Uft", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "b519eb34-2744-40e3-b026-c6ad51ad1726", "value": 25284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "3de7690f-4c77-4a3f-babd-b3a05ebfb86e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee27eb4a-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "9829c455-e53a-4ec5-bd9e-4836a1f3bafe", "comment": "Malware payload", "value": "442b16148969e0fe4506886ea52ef130", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "b3a5208b-55f2-4f4e-9e4a-26c782a5cf5e", "comment": "Malware payload", "value": "b11998016b3dff6845cdd7f9c6b7c08a9e02c38327e84b98b7be04cbc7e1ac08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "c01a65a5-606b-4639-9358-d45434850410", "value": "T11572B06B13131BEBD82A983612E91BF609728961F953EC86A801C5538F570E47CDBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "40861093-6a20-4de8-b4c8-15d83536eaca", "value": "384:U3uNiJW9NND6CPG1jwUp8A6/B83BtDA1JgGlzDpHOw23a+L:U3cieN27xwUpX6/KxtD0JgGlzDpuWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "62b653b8-66fb-4e44-83c8-ad6df9b8fcee", "value": 16064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "4497b97d-4086-4ebb-8f4c-ddd5ee2afb7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee291d4e-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "347538af-4d5b-42b5-a810-25f507ad57c8", "comment": "Malware payload", "value": "24ff9b0b662ce63dae5e1fa58a9d8ad5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "5b74ef96-c0e3-4f8f-aad2-f8c8c312b413", "comment": "Malware payload", "value": "ca05d5c61cff1ffb32c1b4f8bb5227320f90d4cc36c2b05e406350f5071531a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "0ce36c19-56d8-435e-a978-03a4a8246082", "value": "T144D21939EB320D13C4D559B896F3432CB9FA465E65794B1A3C670EC8FBA1A846013F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "5dce95a8-d31d-4c36-b196-ad0b9e3759a6", "value": "384:DXJJt5iyYWz1vWQ4OxtuQljdf5iFU+pphBGMorGdC:DXJJt5k8xPLWO+Lj9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "09aad76f-8d5f-437e-a111-66f63c60f01c", "value": 29172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "14a2bf4d-2ded-4878-be5c-03a28333ff5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee2ee02f-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "c3032d91-e82b-4b9a-95a9-8411c997baae", "comment": "Malware payload", "value": "ba02820b4f65f1ff5a7054f9206d5a82", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ed3c3792-e71a-4717-adeb-7f50cdb26ef9", "comment": "Malware payload", "value": "edca648878da699457d345b19412036b6623c75f13d5fa5e59ac77c957bc06a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "0d45dfb3-e566-4c9d-850d-f1a1e4785b8b", "value": "T1C572AFF7638BD4F4C936B1B3196842C4FCB3B42764398FAB04A171B6DC7A6046A60B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "9f44cd63-cf4d-4927-bc67-07e4fcb7f080", "value": "384:mSpXRiVKXrhy42wONDeSD2SzfLqsw0tMxeJznUxaVXALs7H842+:pt5Iec7f+swUVzBc4N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "76372e2a-6e2a-4182-beed-21c1212a4fe2", "value": 16580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "dc82d286-bc60-4040-8d2c-d1d64496ec0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee34672b-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "5dcf4edf-4a1d-426f-b52a-2b74e923e2b0", "comment": "Malware payload (Mirai)", "value": "4634b11ebbc0b719c02f18e560504422", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "31c6cfdd-655c-425b-8339-27ac09828900", "comment": "Malware payload (Mirai)", "value": "704c64073e98b5a92fb6f41293374ef2b91ed12065b66b50c954959671687e8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "8a79265d-9433-46c7-b04b-8ab7fc4ae24b", "value": "T197F2F2F1C2718A0CE33D52FE45AD6D0D2845981CAD04A1F6EF4878B39606F649DB17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "9b07af7a-e271-4697-ab20-9f1593c4d055", "value": "768:BW/zEpEYEgHE+Tc70R1cVC9owNnTAz9okfsJYOflDY18nbcuyD7UHQRjP:E4B1E+TcAYC9owui3h6Cnouy8HyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "ca3142df-e740-40ae-9f4d-5e5ba238ec1f", "value": 35948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "e1aa03f2-020d-4349-993f-4c6a72173fba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee35db5c-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "f670bf0b-018e-4f95-8d05-56faeccad207", "comment": "Malware payload", "value": "d9a2898f3a122dbd71b7f7459d246718", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "7a6f4414-00ab-40bd-a19b-8c0c5bbefd02", "comment": "Malware payload", "value": "a662f5e5879edcb32efb513eb84b9b83567459287ed475af1083874c04eb2834", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "1746603c-c0b8-4df9-b57f-06ce49075a6b", "value": "T1D772C042B2CE9A07E36D51BE282F7C872C18D32CD68475E3DADC6039508174E3D2D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "84b341da-168b-4fce-8e80-7f9c419afd9a", "value": "384:M5wwvrqtVgF3RIGcDkutjn86REzWvyZDq31ANaNJawcudoD7Uqy8E:44ngFKGcDtj86RmWKtqBnbcuyD7UeE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "e1ffce6d-f2fc-457d-aee5-4011e2dde70b", "value": 16028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "e3dfb184-762d-43d3-90ca-3ba9f5a981ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee37c510-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "3a00bfc4-0273-4ec7-8c88-05039ff39c9a", "comment": "Malware payload", "value": "81800d7bdeab860fde964c808392d3e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "3ecda409-c878-4242-9689-645d126c3d5c", "comment": "Malware payload", "value": "119334fc9aa05c272da7e1b9ca1a215a22a578d339137cc90886bf1a1bfe51ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "3b175dd6-673d-4337-be7b-5ec39448c9f2", "value": "T163C2F9BDB542EABCF44FFB3EC401410D7A70A7255041177527A6E937FC332A8196AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "8dd905ad-bbd6-4048-9d7e-ed1c70b3e6da", "value": "384:yhp6L4oTVmRiubiP5OV7PF2GfpWOS+v7/71jX8HAp3Z3ymdhSP6oN20/lvH:yCL4oGCc2d+jd8E3ZtEP6k20/lvH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "e6422d36-6c9d-4e35-b26a-d1aae31ec664", "value": 26820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "0a6a5a13-3951-42c0-8300-f2cc77561f5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee39097d-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "1f2bcb3d-3daf-4ec0-87a7-fc53e47bc130", "comment": "Malware payload (Mirai)", "value": "2b07b2c966343c5ea3117dedf4b55258", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "fa8790cc-dbd6-4da0-9163-b2e06ac196ad", "comment": "Malware payload (Mirai)", "value": "7de77a1518419efae53b6b3163335ee842a5f0f8d6bd959b4488181ca4a8b7c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "daf94762-f2de-48da-bf12-5b4c3af6609c", "value": "T11C639E16D82509A9C286C5B471EC8E3A1B13E5C063837EF71A7AC375A067D9CF849F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "cc970cdd-b3a4-4216-9aff-1e6a37cbf90c", "value": "1536:D/rMkOtfaR0glv2ZKsT5Z7BPxznCI0sCp8udo:DYkwfCFlugsz9xznsxrdo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "96fa6d51-15c5-43f1-a23a-48d60c4b8b33", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "5602697c-4be7-406f-90f2-fe898af7fddf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69161952-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "0096f983-597c-4c2c-8788-065166c38cf2", "comment": "Malware payload (Mirai)", "value": "216cf1df603635fb6d512b1b87e48deb", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "07b184b5-ced2-415b-a919-b457623f7f51", "comment": "Malware payload (Mirai)", "value": "1f959f6aa6ffafa144811ebf6bb127592060ece9f588d9993ceb1d273f2ca766", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "006349e5-d222-422e-aa55-4e3750d638ef", "value": "T165A3120B4CCE9127EB8B833E85591B9B3CE1F62E7948C998BBF85706D2DA0C5847D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "80c4e989-1a67-4a72-bcac-4f13c1ae0c9d", "value": "1536:eqWX9xpzFug5P7Co8rd61RTAp9vY+4MN25O1wtbsrDxqs61jOni5h:fWXbpzFt5+oT1wG+4MYk19Yn16i5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "3700f041-9131-49a9-92ba-e0319636d8c6", "value": 97936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "62cf646b-b916-4501-9828-c8f13da563e2", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee3cfaab-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "cf7519b2-25fd-4fec-b767-e3ac59d6f01c", "comment": "Malware payload", "value": "d43a1355c9fb4782aa11caad1ca9c02f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "44516ae8-12a9-43c3-84a5-e911056915cd", "comment": "Malware payload", "value": "c627d9b192be3d9c75f4f65d361f3f1c01ea2f7f465d4d40e5d3db01d6004f27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "5f823827-4f92-461a-86e1-8f5e92674952", "value": "T11E72AFAED9C1B4CAC99E0E3E838C173545D99058647D4BCD3344CC58E7BE8CBB1AD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "d9b56d94-f41f-4b7b-ae9c-79876d8ff569", "value": "384:9QXhCQ9ASU9WGQlbtaflmzms3eRaV9HQXRWGVCz7zZFwJ:9QRCuASU0Hs8zeQ1SWTNqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "4ce94c60-5e8e-44f1-9ce1-663b8b39c75f", "value": 17084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "3f11d346-d193-458c-863e-c07b216c304c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee41e328-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ae11400e-9b25-4b3e-9d2a-6dca1f1169ca", "comment": "Malware payload (Mirai)", "value": "38062f292bfa6dbb9416d5aaf6289a0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "d6dd31f6-83d8-49cc-af8b-a2c5805a3312", "comment": "Malware payload (Mirai)", "value": "db76f64a2ab9133ae0dcea6e447b843cd24f64ba35c7f8c51738591be7000e50", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "56caa7e3-a700-46fc-b010-f436e5b8c01c", "value": "T108C23A86FD804917C9D21176FA2F918D3B664BB4E2EF3203E7179F61274392A0F3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "da2d4826-35b0-468b-8339-a104f8c65d35", "value": "384:9taRORfMYBU9Fzs6uqUImCKAktq6NzspX94K+MG615kUX16MBueOuKfIFx4e:9tqZkOuqSCsc0zc4/fEvX/ueOuKh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "288e9760-5f7a-464e-bcc9-68446ce61998", "value": 25808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "2610871a-8a12-4179-85c1-7256691fffd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee435d84-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "6cd7b57a-abb8-4a77-b280-bdedd3f95c5a", "comment": "Malware payload", "value": "5a2677fffd95e98b34bcc606759d0caf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ce332cad-d8bb-4d4c-ab84-ca600bf7a94e", "comment": "Malware payload", "value": "ad5ed7ce8dc5462e06fafa676d4217960952df10cda43be89fddd3c4b7486c39", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "584bccf4-888f-453f-978e-f4f66fdc5105", "value": "T1E862BF54E05A4DD2FEAF9DF11989D7D23FB08F4DB1B1CEE216969F412501A17EA00C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "d0d12220-131a-4270-85ba-09da875afca6", "value": "384:rEPWrcwa1Yxa30+xP2BpGM4uVcqgw0Og724kmWY:iBYYE+1cD4uVcqgw0X7JkmWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "34476ab7-b6e3-4459-8a73-c3bb9e460c4c", "value": 15320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "349bfc10-3535-46fb-add9-2b22ef18099a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6922c0b6-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "6b2c5f07-437b-4446-8659-7b6bae64f970", "comment": "Malware payload (Mirai)", "value": "b81db04dca3e6f974b8145e1e2f1a306", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "56b6dfc0-2b56-4873-955c-57a7ff32ac9b", "comment": "Malware payload (Mirai)", "value": "7244d8f48ecb496020d4de0192fc9377bd013572d1eecde227472b27e0629703", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "df669d43-d37a-48fc-9b8f-db946884a888", "value": "T199A3120131454CEDC88BA3BED54B4C44DA27F317A71DB648E3F86B9E2B8394E5980D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "727ac610-8b1d-41aa-92e1-43186f73c743", "value": "3072:WAhJUa6Q1xlAIDFmJgOe9zjY9LqgpUvzUe:Df6EPmcY9yb1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "7d8f61cb-9e56-4c83-abb5-4d7260a2eba6", "value": 101088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "2b726e23-414b-4fbb-8f75-8529ae7e630b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69238f45-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "634286e2-bbf3-46fc-b6ca-ffa15a3f8391", "comment": "Malware payload (Mirai)", "value": "c169bd3369ec5188e97dcda35d02ebd1", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ad24e7c7-eca5-4c98-96a4-e90edfeadb94", "comment": "Malware payload (Mirai)", "value": "95ca6596a568a7d0c8a2fab1768926662ddb33e0bd100e6aa6ef8bee69ec44ec", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "0f1b0c99-9922-4825-b9f4-6133bafe59a1", "value": "T115048CC571483D6FE6D33F3EC51815279C0C8B57A8838A2150AAFE834BB75A71F369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "5d9f5c81-e076-444a-a9bf-369086d9c323", "value": "3072:dMWoDmwnO+3SunCI9tdUd5thpszfyv0yZRpqia4svLftcWavvfGoeb:dMWGm6O6S/kUd5npszfgpZ3qiGvLVc1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "80e7ca85-22aa-41d8-a6b7-087f57012d0e", "value": 183864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "08040035-ede3-436b-a92b-8b105237d7ca", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69084cb3-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789877736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "c60f06fc-32ae-47e0-b970-9637acde1b70", "comment": "Malware payload (Mirai)", "value": "3f7a2e254ccc744896f39e57ed797d5d", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "2ba905cd-59b0-4bdf-b537-17afd44351ed", "comment": "Malware payload (Mirai)", "value": "73a4a5baa5a433036a79907132904325f2f0b4bcf6d6573751345756f7c36f95", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "992ece03-5c07-4ce7-8d80-15bf4509284e", "value": "T1D2D312647885ED83DA8601F1EF7057C9B6F19399FB3FA0B2D2B8C51613A0B83761A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "68fdb5c5-d586-44ac-b66a-fa9a4ca6e51f", "value": "3072:xz+KzuZQyCJTk6hfgB57OmgIXay/OMNRqCvZ:xSKzuZQyCmqmvqkh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877736, "uuid": "363b1d87-9242-4a1b-bfec-d3bd5336de5f", "value": 137336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877736, "uuid": "7abbecc6-b483-4be8-9def-0bf3dc69acc4", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "730d080a-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877784, "uuid": "a0737edf-fbfe-4002-9568-ba664a59a65d", "comment": "Malware payload", "value": "9c8654762e312bbd0cc1e99708ade5b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877784, "uuid": "a27d24f0-991d-48f5-893f-308e7bbd2bec", "comment": "Malware payload", "value": "9ad3e7e860ca8f36eb1113ba94febceb0425c6b67eb6be32013eb33def198b9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877784, "uuid": "bce82897-109b-4285-abc4-d04171db262c", "value": "T1E472AD8DD0A57ADFCFED2F3C55AC23B56DC1B0A0721D4E0D93059CD5A3A9506B94E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877784, "uuid": "08c0dd77-0293-47ce-902d-de205b767773", "value": "384:4xjFfh7KRhyAYjiJiwSKT5Yye6eoxY5pRWGVCzrqHAEiul5:4xjFp2Ixji0wSo5eYanW+HAET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877784, "uuid": "df40df7e-dc3d-498f-bd7b-d56286c253b6", "value": 16876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877784, "uuid": "3c8c34a1-bcbe-489b-9841-fe0bf938d812", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "732697cb-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877841, "uuid": "ae536b69-93d7-4483-8b30-db3b64d8e0a6", "comment": "Malware payload", "value": "a034babb7b2d5cb24f6e87135c6b2171", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877841, "uuid": "ce28568b-0b51-4c8b-a2a8-b4a3da8b9255", "comment": "Malware payload", "value": "6ee20fc6e6deecd5cd67bc4910f441f1ecbe3145a858e0c018ab00073477ea87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877841, "uuid": "ae8dd793-42a6-4aba-893b-2bc9b1b04d71", "value": "T18072AF57C6E64604C17E90721C6E3E143DB4E21EF58CAAAB7AE870361063F693D3C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877841, "uuid": "60682cfe-85c6-469e-8daf-fc45337ad5a4", "value": "384:MMCl4BjdrDUZRY9A+/xV1c76N3Cau1q6I0GSANaNJawcudoD7UqkX0qWT+IV0Y:Cl4BOp+S2N3C1Y6SsnbcuyD7UB8F0Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877841, "uuid": "7198b923-df81-4805-9d33-8cee23dd936b", "value": 16008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877841, "uuid": "95f67f40-ee8c-4145-8ac8-ae3daf4c8128", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "732574dd-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877841, "uuid": "4136fb83-0cad-4b9a-bff5-e5a6ae871998", "comment": "Malware payload", "value": "f7787ddb3ef6116340ad76b228c19856", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877841, "uuid": "b9432461-d574-45bd-b705-5ab4dab98a9a", "comment": "Malware payload", "value": "7b9953a52561c006b37e947bf06e29a8043921c1397758f68bb876afb16d604e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877841, "uuid": "dfb021f6-59d8-4612-a1ac-871c4efb208f", "value": "T14A62BF2395A707C0D75EC03909BE7D8F242CB02DEB0C569ABB68617DC562F583D28E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877841, "uuid": "ce464c40-cde1-429f-b891-c0f5eac092eb", "value": "384:M29ZeCivRadYdy/nfBD6AKzLxHgKK0VkLgANaNJawcudoD7UqkX0qWT+IH:rSCiEP5omKK0V1nbcuyD7UB83", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877841, "uuid": "f6612545-8b9d-4ae5-91b9-b7be84d58989", "value": 15852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877841, "uuid": "b7e21d77-ecff-47d8-804f-29d89e9ff096", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40767ed0-b4aa-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789877874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877874, "uuid": "e01f4fb5-8cf6-4923-b0f9-9a7a06272283", "comment": "Malware payload", "value": "faecbcc9f1ed615950658faae67a4b47", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877874, "uuid": "5e7c9674-0032-4f7f-ac00-c66225c24ddf", "comment": "Malware payload", "value": "4f1c47df295dc6270b4e5929693208f310fd4dcb22dc1b23c3f11436d055454f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877874, "uuid": "7299eb9d-a2f5-49c1-88fc-be52c819a279", "value": "T1B906330769D67CADDA52FEF3DE023F85F384A3288762873D61C2B511760E71A8B652", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877874, "uuid": "47f9fec5-765a-4712-b743-56f5ce80109c", "value": "740b08f4ff3b69c9c5adb9182d224363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877874, "uuid": "22f629b1-f9b1-4823-bcae-619dc6fb2e67", "value": "98304:SGWJ6Dx4YzXD0XjcSz8+bHnEkt+oHt4jIHV:SGF4OQzzDEkQktAI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789877874, "uuid": "1695346a-e38f-4aac-ac75-0f9ffcf3d9a3", "value": 4013568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877874, "uuid": "7e5feac8-e04a-467a-bbff-d81c58ce48b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ee47417-b4ab-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789878220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878220, "uuid": "420f0f4d-d637-434a-a0ea-b93b5368ca8c", "comment": "Malware payload (Mirai)", "value": "756d83d3fd7798258c101ba5fe6a1e9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878220, "uuid": "df0c5d1e-f33f-498e-b7fa-f9132ec00a49", "comment": "Malware payload (Mirai)", "value": "28423d6534cdb6b87d6e713930926c82ce4e19f9018647809bbebc1b7be27885", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878220, "uuid": "1ac1bdff-9a15-4309-82e7-88643933ec0a", "value": "T17F03F11AA861B09FC91F1C3F128A10AD1E90E1D6754A7B6BA365CCC5AF3684F94CC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878220, "uuid": "7b1c0de9-dea0-470c-b82a-1fcbf857409f", "value": "768:CF4o5gt3IEG6Ks1mqDUKf+8hr89kxcEDV/SLXQlov0zBZLvad4mwu0zOg4zWC:El5JnsrXvrKy9QjyBZLvDmR0zOg4f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789878220, "uuid": "353f537b-c4f8-4dbb-9e45-db2c94fc52ba", "value": 38640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878220, "uuid": "de66d4ea-e92d-4b94-a921-407fad612fe5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa84333-b4ab-11f1-8686-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1789878275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878275, "uuid": "7941375d-a4cd-443c-990a-d8a6d6b4351a", "comment": "Malware payload (CoinMiner)", "value": "183f3cbdda86f622a7da38c76d5730ba", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878275, "uuid": "fd8e6689-a664-4988-aa8e-54709aa53c1d", "comment": "Malware payload (CoinMiner)", "value": "12a5573dbec3abf0780a725da1faba168a2cd0d344b5303aeb8b94d9f6460b1b", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878275, "uuid": "92e50a0b-826f-4c13-98b7-8169968c6984", "value": "T11066337C27EAE71BEE8301FDDA914859295FA70C1007430D8F85A98E4BC6F1593FE6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878275, "uuid": "d6861761-01ae-4879-9366-62c563285482", "value": "15596bcc7e7948f19395f593298f677a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878275, "uuid": "7aceff35-354f-40cb-a85d-bb0dcacc958c", "value": "196608:2PY5I/tv2FGXj2dyc/1mup8AuXYUhNjGbm:2+rFqq/1Np8ZrG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789878275, "uuid": "cea7c959-f775-45fc-b9be-c39f144890ae", "value": 6498304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878275, "uuid": "54aaa35a-67a5-4c35-ab5f-2014fbd4c6e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1916b0dd-b4ac-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789878667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878667, "uuid": "d23d64c4-550b-4eb1-a67d-ac0eb85bad5e", "comment": "Malware payload (Mirai)", "value": "1623ef1f9b9c4dbdd46170805d63270c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878667, "uuid": "a742a6b4-fa96-4296-a8ed-65a830618621", "comment": "Malware payload (Mirai)", "value": "80828752354b3a770b7c63f46006334fc705c718d40cf3e1df1dc5a4f0fdf043", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878667, "uuid": "c7a3a59e-2fb2-4b83-a211-fadb814e19ac", "value": "T1B1A45B55EBE3C8F5F41745702027B3374A36AE395036DA87D7C8E6637851A82D32E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878667, "uuid": "c4960d67-ef03-4216-a442-0f3013879528", "value": "12288:uG3jxoLetDOGI0D5DQFZYe2rCuXZK0MVMnEMlV:uG3jxoStDXI0D5GY5muXZbMVKl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789878667, "uuid": "8cf130f8-53b0-4a4e-906a-97b96d65affe", "value": 466644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878667, "uuid": "7642a3bd-8f40-40ca-b912-acff44ff6c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3475f117-b4ac-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789878713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878713, "uuid": "cd1ecea6-3cba-4304-806a-651e1f4bd1a1", "comment": "Malware payload (Mirai)", "value": "a4919b011a09cca00b9da7a0630c87b7", "object_relation": "md5", "Tag": [ { "name": "176-65-134-121-8080", "colour": "#e5c927", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878713, "uuid": "bfcd1186-68f6-42d1-b749-4fc2527fc9ef", "comment": "Malware payload (Mirai)", "value": "b7df67b510986981958f203da1779124bcc63a10a5769c86a22f5a21a01e079e", "object_relation": "sha256", "Tag": [ { "name": "176-65-134-121-8080", "colour": "#e5c927", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878713, "uuid": "debb49fe-5376-4a21-9a2a-1c7205fc5b4f", "value": "T1B5355C5BB2B374BCC557C430439BDA62BD35B46502226E7FA5C4DA302E26E702729F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878713, "uuid": "9ee0d884-21e1-49d9-bb59-313245341c35", "value": "24576:4ODfyhC46zIHbddC+4oOb9vSZKt+QJCpWlZbIMa:4Mx46z814/Bvx+kCpWPbH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789878713, "uuid": "d1d35bef-dd39-4d6b-8051-cb6a358803b8", "value": 1073952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878713, "uuid": "c7b28843-6896-4d72-914f-096dc1dfa724", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0733fe27-b4ad-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789879066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879066, "uuid": "54b9aba4-d6d1-4d6e-89a2-6b42804ac960", "comment": "Malware payload (Mirai)", "value": "4aae09bec175107efd9f93fec69c4de0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879066, "uuid": "4690f658-ed87-4ca5-b5bf-ce53cfa567b1", "comment": "Malware payload (Mirai)", "value": "5492f9606bf12add8b8414b224e8272b7d422baedbd951e8874a4bda0cb716bc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879066, "uuid": "8af06d92-fbd5-4a4c-ae17-bfb000aa7d87", "value": "T1C8A4BF56F61AEE47C4F3A236D4BB86A07362EC4F1792D302260D657D3C1B37A4F292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879066, "uuid": "b10e1454-5498-447f-9c98-aa3d031ef212", "value": "12288:UvelbsgQeWpqkXPqBpe6pmNjFDe81gHzGdanDf6k:U2lbwjJXlxD8GdSDf6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789879066, "uuid": "3997b805-e690-41b8-898c-418a0bfb2fd8", "value": 492424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879066, "uuid": "c2ae3fe3-9ebf-4c9a-ae78-761dd967d3a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de81c322-b4ad-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789879428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879428, "uuid": "d1cfcb8c-3e6b-4632-8a01-f8bac9ad7141", "comment": "Malware payload (Mirai)", "value": "474efedc92f2a0a0f0200dd5c147e4a8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879428, "uuid": "93d35f7f-28b8-4ee9-bef9-6efda4006423", "comment": "Malware payload (Mirai)", "value": "9b8f8579deddf85f3785fd740fb3f528fc480572129ceea6dad03a371440f775", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879428, "uuid": "0af95386-6194-4d98-84f6-1dfbf3a34d51", "value": "T1EBF4C05AF51AEF03C8F3E536E47B82D07262EC4F57D293056509E9793C1B23A8B1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879428, "uuid": "8784f533-d1cb-4b8e-a989-8b801163ab6e", "value": "12288:LgpK6Dphdz30ot70i060Y7i+x880dz9Gd6pAPxuqmQ1UDtyw70Vlb+E:fITdLB/06388wGL8hDtywIVlb+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789879428, "uuid": "2b44683f-4a3b-452f-ac01-68c4d5ec6212", "value": 741816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879428, "uuid": "7fdd40f1-8f04-4999-a89e-09d3b77c772a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25499c54-b4ae-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789879546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879546, "uuid": "64356c49-4da7-463e-9c88-9c39a445b258", "comment": "Malware payload (Mirai)", "value": "23b6516aa4a454857df7e664ec163b7f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879546, "uuid": "6a3372d9-ece1-4824-b72b-0a1ab2dcc143", "comment": "Malware payload (Mirai)", "value": "8b8e64862b0fe3aec19fd8d3c7eb0471109471cf3666a96cb60dfcb3d8e8b90a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879546, "uuid": "663500a0-e990-410a-95b4-be388eec6560", "value": "T16FF47C273731DF65D365C67405F3C7915AE520A20AE344DAA3A8C3287E21A2D2D6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879546, "uuid": "e6216859-6458-4024-a839-e70314c70ee1", "value": "12288:v4cg+Zn1W4tzRKMNjbOsF47iIRgpiGGhQiFhyN6rTHUJTxVf:1g++4t1KMNhF47iIySQin0JTxF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789879546, "uuid": "7332f5ea-889c-481c-b510-6ce731644aba", "value": 727084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879546, "uuid": "b40084d2-b2be-4132-affd-82cdadb3770e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc9322b7-b4ae-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789879827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879827, "uuid": "75771d5a-d4d4-432a-87c5-455a9d1c87c7", "comment": "Malware payload (Mirai)", "value": "c342adef9695ec299a65dea20511569c", "object_relation": "md5", "Tag": [ { "name": "176-65-134-121-8080", "colour": "#e5c927", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879827, "uuid": "1bdb40e2-aa2b-43f2-9995-9c9f28dcf36e", "comment": "Malware payload (Mirai)", "value": "079dc979877b459a9bf711923a665b772b3a04abecef66b8eabdd2baadc99bce", "object_relation": "sha256", "Tag": [ { "name": "176-65-134-121-8080", "colour": "#e5c927", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879827, "uuid": "9bae32f4-0b5e-45cd-affa-22e89277bdce", "value": "T114356C633731CF69E355D27005F3CB51AA9520A31AE24096B36CC3287E61A6E3D5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879827, "uuid": "181ff798-a929-4c51-840e-da80d1ff84da", "value": "24576:FUpTCOUi4TCWyKRX1JSsicR7gSqtUxuHnYDD:FUkS4TCWyKTPRUSyUxuHm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789879827, "uuid": "e49d9c79-e344-45dc-9c5c-4ab9eaf8e844", "value": 1060748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879827, "uuid": "0a79e55e-599d-45e7-9a29-07a3e1520459", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8028721-b4ae-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789879873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879873, "uuid": "5b695881-db5e-4797-86c7-b6411e1febe6", "comment": "Malware payload", "value": "d46db7f14ed744c4acaa62990f29274f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879873, "uuid": "a002f897-5bd6-4351-88df-d8618144f92d", "comment": "Malware payload", "value": "4d18c54a16e53a7bfaf0bb653136e40aecde6f906f23f2260e8e70b068b8b08b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879873, "uuid": "325e2f45-201d-4219-891f-ed693ec7e807", "value": "T150A3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879873, "uuid": "803d8d5f-8c03-4200-a17d-f5b01f9d2725", "value": "1536:M4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAN:NgVBH3mPm+sqk+HAw0F5KijXxN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789879873, "uuid": "d6316bc2-ed76-4560-a797-ffecbaf152d0", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879873, "uuid": "c822446e-8cdc-403e-ac73-27c10fb49a09", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "905bf3e3-b4af-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789880155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880155, "uuid": "4cbe74e6-75e4-4a96-9763-4453c73ccd6f", "comment": "Malware payload", "value": "e7838019a8dd85c837d6d00ec468c147", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880155, "uuid": "10700a47-a188-44a1-9fbe-ee6b00ebaa7e", "comment": "Malware payload", "value": "293c2f2f95c1c461869cfc2d2ec35cca863e57c491a42bb5f4641ca7a6f3c714", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880155, "uuid": "5691966a-fbe7-4a5c-8d2f-bd0b84ee92d0", "value": "T189766B236B18EB0FC22862341DB1CAC8676A5C9601D79517B385F319F9F21BC896ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880155, "uuid": "d6b0479d-e3df-451e-a095-a965b9ff6f35", "value": "98304:2uuSwnU8SPXx3IXnsqSwCjEPmrK0kUNuCW08IPYS+3ivm:OnU8SPXx3I9P8LkfeY9yvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789880155, "uuid": "a987a589-4b45-498c-8957-c2e4a1ee84cd", "value": 7309698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880155, "uuid": "a3ab34ee-1aad-4e8c-a421-549ebccb6657", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b16c3b33-b4af-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789880211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880211, "uuid": "0ff0f8a1-3ba3-4e95-b9f7-39b330cd8544", "comment": "Malware payload (Mirai)", "value": "bc5357d42e63c384616f827b62d3b279", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880211, "uuid": "4e9ee061-9d9e-4e6d-a13a-81691845a982", "comment": "Malware payload (Mirai)", "value": "37dd737a342729c7b8c4e6f28140f2ff977a433793482b6bd488efd56a20812e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880211, "uuid": "8eab43aa-9b7d-41e2-b7f8-2813ceb8b027", "value": "T126157C5BB2F374BDC157C134479BCA72A935F46502122E7FA1C8C6302E2AE641B1AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880211, "uuid": "e899aa8a-85b4-4798-a7e5-9b354846fae9", "value": "12288:ZugNP46S4QVs7a+6xGv/7VZji59IH0j/APyYiztSIHmxAowYRsXPi/:7NP46S4QVs7l6A5Zji59k0jZz06FYRs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789880211, "uuid": "73935cd9-4d04-496e-8641-ed025d668b63", "value": 889840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880211, "uuid": "4cb1eb8b-ea22-4c6b-8ef2-1c1b1d3f60aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6c72e26-b4af-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789880300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880300, "uuid": "f806ab44-c8db-4cc6-8043-0cd68f1f5a89", "comment": "Malware payload (Mirai)", "value": "1c7056455e75b0f2c94c0af17c364e11", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880300, "uuid": "ee98cb70-adb0-4eda-9f99-4c558596549a", "comment": "Malware payload (Mirai)", "value": "5939e7d67f0db63c0e0c34e020e7eaa0b6d9dc05f780b38e9d94d2a6952a6daa", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880300, "uuid": "e8edbf39-9d56-45a1-8e8c-b894481ad1a6", "value": "T1462413E5662358ED4D9F9BB6F58C2AFF36F6B3AB4578B43C794800A4005C872E5068", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880300, "uuid": "54ff8a21-c3a1-4f68-8a1d-62347d5049f5", "value": "3072:9ERNIcH3+GBKXeV2qFP8mqYkjKEd4W47Dhh3GrdlUiwuCN8q8t6gMNWtJi63N9T:9sIo+dLEPxhkjuhIrdoVN8q8LOWDb99T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789880300, "uuid": "1b94ff35-8a37-4692-8aeb-50f7f3d221ca", "value": 219504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880300, "uuid": "41731af2-2dcb-4189-9ea7-7cc260fba573", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f40924d-b4b0-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789880368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880368, "uuid": "5ff2a617-f04e-41a3-988a-a11ab41d63b2", "comment": "Malware payload", "value": "1e22c01cd24b9d8cfe8be8e07e5a5c2d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880368, "uuid": "9cdc8816-d439-4c0b-acb3-cbfbdf00d3fb", "comment": "Malware payload", "value": "2a6dc1a296e68e4ee27aee5237afc050e084e3f73a528e21a109b964b16a30e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880368, "uuid": "1b20ee4d-8970-4250-882a-da509bb1db5c", "value": "T13363F9737886142A310F028F6107733CB5BA99D6DA01D9F1F6F661285BB4FA136F32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880368, "uuid": "cd36e6b4-380e-4838-b398-253f49b3c6a6", "value": "1536:uFypRUThfsjMpxD3tKAD2dDeLSJbnXrqaTPW/:uA4NEjMp9tP4eLSJbbqGPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789880368, "uuid": "8b11185b-1d93-4858-bd9e-635ef27a8043", "value": 71235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880368, "uuid": "88abcc6f-a1cf-4765-98c6-016bd1936720", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "302ded1f-b4b0-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789880424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880424, "uuid": "2317a8cf-bb88-4940-b9a2-1bb1b4c304d8", "comment": "Malware payload (Mirai)", "value": "54d486277afaafecf53e453e8d3d5a79", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880424, "uuid": "8d747877-95ee-444d-9a4e-e4b6ccf84931", "comment": "Malware payload (Mirai)", "value": "8d0584a13d7a0619e3d33261e70c649b54ad9969780419345612862a75043bf8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880424, "uuid": "1ad59da3-def2-40b6-955b-7d978f2b63f2", "value": "T155357C5DFD4F3C47D2C6F23DEB4A82E47127B099D62310A735C1020DE6C9D998B62A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880424, "uuid": "63e79480-3893-4769-8dcb-5ef559b5ac4c", "value": "12288:GkRowc5A5GaG8hrJRlRmCBgVrQgV0HRfva5GNDDn8shga5hi62QIbISMKZ3PwIom:SX+rJRlACE3Kf0shg9TUSJBwIpskwv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789880424, "uuid": "e29962e8-1faf-4faf-8b4a-4a1cb34f5a02", "value": 1095504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880424, "uuid": "b0b83b78-970f-402d-befe-1ad04f1990d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d65a608-b4b1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789880956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880956, "uuid": "53ce9387-064c-4098-89cd-ea1963921f02", "comment": "Malware payload", "value": "7994526137e2a15ccd92f24c40788080", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880956, "uuid": "4a54acff-bcdd-4bd3-a603-6c15837df812", "comment": "Malware payload", "value": "11a71787468caad6ededd2f8a1c03cefb2cdfb73c938534ed5789b8d9c0607c2", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880956, "uuid": "dd9d0243-d353-4efd-aed4-b54dca1cd78d", "value": "T128D097A391E301B801A68D90F4C23C9070080BBF8CE0C68B749314301F0130DF0E02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880956, "uuid": "fc4d4c5a-3f2b-46fb-86a7-2ffc03f91e43", "value": "6:hTTnQL0tDrF9HrvYAulNXYq4HvXDG+NjVsNXYrkJ:VTQL0f9LwPiq4HvXDGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789880956, "uuid": "d65baf6c-9835-4781-abcc-7bcf808c7ff5", "value": 263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880956, "uuid": "1662de43-44b0-4853-ace9-8d054357c4ac", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94593426-b4b1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789881021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881021, "uuid": "7022216e-dd7b-4000-a56e-7a77acdfb8cf", "comment": "Malware payload", "value": "bf08e0a73f45c9e149625b4012996be5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881021, "uuid": "0a624986-c622-40f9-a139-bd33676853fc", "comment": "Malware payload", "value": "c2ff49a8cd9f50f4a4a513ec90bf9538f22e9e81c1becaeb4cae028ff48ea1e9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881021, "uuid": "84446d82-e59e-4d4b-9857-33a5bf7c7e5c", "value": "T1E134E010D9F862DF061D225FCC8E4AAA9D0E376BDE56DA06429B3F7E603C85D34134", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881021, "uuid": "f94df663-7bfa-4874-a73b-9ffebfb08ec0", "value": "6144:Byy+FcAJgtkiONXUtT94GItr3mp0uxJkI6wlZjyjdxMbXaazNO:ByfcZt8NXUkf3ExJkaQc9O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789881021, "uuid": "44dc5d16-0ce9-49b5-9dad-78db368b91d3", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881021, "uuid": "75765099-eca5-4b65-a15f-35397eb9cc95", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "229908ee-b4b2-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789881260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881260, "uuid": "ba8b3653-3ad3-4206-adeb-e04d736bde94", "comment": "Malware payload (Mirai)", "value": "075491091f5cb7f096fca3c7e77d264b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881260, "uuid": "28b4c8ac-e56b-467f-a25d-7024a37dddb0", "comment": "Malware payload (Mirai)", "value": "4295229d2dd361f13fc411094a164518ac281ba6a49af47f8ce7c2a7c9977e8f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881260, "uuid": "6468af40-0cd5-4fd4-9705-3e22cdc85a97", "value": "T17BF46D6DFE5F3D47C2C6E23ADB4AC3E57227B098D613119321C1020DE6C9DAD8B629", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881260, "uuid": "858b3b1c-88a7-4684-8e3a-9efa83223a5b", "value": "12288:0Q9MQE5oZkj7Hpt9bDudBbq0ta5YAmdZBJwanWtVfkHz:0QFjkHbYlBQaZB2anQfkH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789881260, "uuid": "291eb813-f2c3-43ae-abf7-d11b0fde0c97", "value": 775800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881260, "uuid": "3ce40d1b-0769-4ee2-8a50-0030e3a1033b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49146000-b4b2-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789881324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881324, "uuid": "878870f0-6be4-4584-8f65-9a51c145532c", "comment": "Malware payload", "value": "4cdef51c5a01fab1caf632805fab56bd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881324, "uuid": "8328d909-65ff-4f59-89ef-4dd94d65744a", "comment": "Malware payload", "value": "9f27db82076a01e92cd9aaf415d86f1789352e288c3d1f1b4f5e4383a2a47653", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881324, "uuid": "5e2a83d0-9f1d-4adf-896e-0eabb0cf9e26", "value": "T17EF1C57025F08D732E21AA80B3372BA5ABB7D95745E7218C36DE1D265F86B12B0FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881324, "uuid": "db8896a4-1ebc-43a4-b61d-9d83979b34e1", "value": "96:cLuP3B67IBZIBuIBvMIBoItIiIImzATzAOezAnzA4zAAzAgHfZ8U2:cLu567q9vD8n4oxK6tXfU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789881324, "uuid": "e95987ef-81cc-49c3-8412-41e17825e9f9", "value": 7779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881324, "uuid": "825de7e2-af7a-4d7f-a5e6-21fcb669b073", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f0a695d-b4b3-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789881898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881898, "uuid": "41de792b-bd95-403e-bd4c-d9b8975f1e76", "comment": "Malware payload (Mirai)", "value": "0665592e00c78e9f17153894100356fe", "object_relation": "md5", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881898, "uuid": "29e0abdb-9da4-48bd-9055-b22deb7917eb", "comment": "Malware payload (Mirai)", "value": "29db3c6e90e68ecfb092dc967d8870e14047b05f1b83d8aed94b78539819e97f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-157", "colour": "#58d4de", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881898, "uuid": "bd74c193-291b-4497-b98b-d0a93a6900ef", "value": "T10424229DB6C5707CF06961F26BBC8DD1534193F8BB748F4BA0920B2B027C464974AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881898, "uuid": "5035da59-8dfc-4bde-b224-41350c2ae223", "value": "6144:6wyP36iASKnQbgXCzfDzFRYfzRklVRoq1gvajVQL:6wyCixgSzfDfYbRCZ1gyy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789881898, "uuid": "3a298da5-cc9d-4f85-81d6-d04dba5bf10f", "value": 222588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789881898, "uuid": "fb42a79f-a3d3-4efb-a54c-8a339a3f2e80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ad37b2c-b4b4-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789882186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882186, "uuid": "07407b20-6458-40d7-9270-03dff3042926", "comment": "Malware payload", "value": "285b47d19f5a676fff0403e0c4d86eef", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882186, "uuid": "44f98ef0-5ff3-4f71-b5e9-ed656456a8ff", "comment": "Malware payload", "value": "ce4c533c4d876c772a39b70ee9f67058c3a49e9e5615a3b9387be3d0b27044e5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882186, "uuid": "4ef7541f-5c39-4431-954f-54498887ca49", "value": "T1CDB186234829AC721157CAA4B146762DC0EE8277F342C65A72FD815C9BD3DC281E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882186, "uuid": "84f6d6ca-8adb-469c-a68b-e6605808b9ac", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGQq/GNt7sG2Exml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9P6GNt7sV1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882186, "uuid": "59fb74e6-5468-434a-a295-098dc8924465", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882186, "uuid": "dee3d521-444d-4d2a-9b1b-1ee2c156f35f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0dd4920-b4b4-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789882331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882331, "uuid": "730e0583-a2a2-4ea1-a2c6-2f88ad88a3a9", "comment": "Malware payload", "value": "0673fca154b47e4158269b4eadd23689", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882331, "uuid": "7e54a648-f90b-4e5e-9326-aafc9cf1efbb", "comment": "Malware payload", "value": "d01fdb5aae8f112526040a39b0bfb9e27d813003178645e65f8d1cfdb2a26c87", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "3d51fd5b-7159-4500-a915-5cfac7e4e3ec", "value": "T1DD85AE17B29610EDC06EC179C7565112FA71BC840734BADF17A8AB252E22FD06F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "d099d94e-22dd-4b00-b160-a3e5a894b55e", "value": "b15607f10222dbea8c0557d3f0e79457", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "319483ec-66ba-49a1-b595-fa513ca870e0", "value": "24576:1TWJIJuiuntlrN+q6kylxfvmspFMRw3k7OPMnGu2/Is6FXFo1AjEyHwdif5YoVoP:1TcIJhunddyj8RpaUnN2P0oyd8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882331, "uuid": "b5c317d2-a3c3-4d8f-a822-a4eacaaa91de", "value": 1706136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "2e9e3205-d861-475c-85d7-ab196a543e04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0dd491a-b4b4-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789882331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882331, "uuid": "3a3aff85-1357-44ca-a8e5-520a276d498b", "comment": "Malware payload (Mirai)", "value": "6b915fb2761245393ae8861fe7cfb7f8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882331, "uuid": "d8beae66-880d-4e21-b39d-6fd538436d77", "comment": "Malware payload (Mirai)", "value": "d3c88d0ed2b95f6d13c04aaee1481c31a4ea8a4eb8f7d1dfcb5b38346e1c8b5f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "7677a630-cf47-43f6-831c-4d4e0dc0f49b", "value": "T15B41D9C910600E71A1B2CA5E737FB848B19EE1E7269F4BD1889C3DB95648BC4F146F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "8a0509c9-730c-4b97-8e88-204d833691aa", "value": "24:EyyOCsGN2b9yDMZbPdQlQreC6E11fwmO5gCDMA:EylCsGNw9yD4EQreC6i1fbO5gCDMA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882331, "uuid": "9eec2f6b-dacd-42fe-b6f5-009917a311db", "value": 1907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882331, "uuid": "3bd7ac38-3900-4c14-b277-8f4327bfbe4a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28b02e0a-b4b5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789882558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882558, "uuid": "6d5361e1-07d3-4f08-b5a3-005f9a3c4aad", "comment": "Malware payload", "value": "f87849970e06bc5eeec2734766aadb67", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882558, "uuid": "5578a315-6bb7-4054-80e2-e1fbc719eb01", "comment": "Malware payload", "value": "22bdfe60b6a966e2598ce9d66339964b80072106a8d2fc9c79c4f281c81fc51c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882558, "uuid": "8364f897-a706-4600-aa5b-ffe3b9290328", "value": "T1637533BF97546DCEE71AE87C2B0865036DADB1B342FD00D5C612A28EC17E19DD69E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882558, "uuid": "5a59bb10-e61a-46cc-9e82-72478492bec1", "value": "49152:vlnYTt7fDvdbSyqFAlMviIjrwj3R21cv22gCN/s:NnUt7pbFddW0LHU20", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882558, "uuid": "78ed512a-21c8-47bd-9ca4-61504987a386", "value": 1681937, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882558, "uuid": "c65aee03-a956-4099-8a79-b3127647b5fd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47ff54e0-b4b5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789882611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882611, "uuid": "cbccb10e-2439-49ff-accb-aa029eac6d30", "comment": "Malware payload", "value": "835e1bf1052533a67e91b428c10b64e7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882611, "uuid": "c375ca95-5ff5-497c-a36f-c65fb4b795f0", "comment": "Malware payload", "value": "2e717e2fd1f95ed8ef1812ddc87cfa96fecab2731ecd9301f73097cf5336a9fe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882611, "uuid": "65851144-81f5-41d5-bab0-0ed1edbd9f54", "value": "T1C716333B50A5AEC0DD3E79BB521DC926D61CF43E87ACD22B4B1930F4A86CB4DE52B1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882611, "uuid": "f4d27cea-783f-439e-b7ce-c3445e3e8033", "value": "a333184d381e7a8056423277306244fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882611, "uuid": "e61a5544-ddc5-4486-a40b-7ebc5d681328", "value": "98304:3Q2Wzdat0kgRmDi1ZjbIWsFz7kKOyFA3Svtnlrbh1NwqB:3Q2WzdaMRmGsFz7kTyFaSvRNbh1N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882611, "uuid": "a081a59b-2659-47b9-9246-f05c19a73384", "value": 4111360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882611, "uuid": "311ba127-19e7-4340-9056-9e9e4cbf992f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52e455cb-b4b5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789882629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882629, "uuid": "4f6fb34c-3eaa-4a2f-87b5-e73ad82b43e6", "comment": "Malware payload", "value": "5b8c754699614d8eefa8313c7f457e59", "object_relation": "md5", "Tag": [ { "name": "docker", "colour": "#74eb76", "exportable": true, "hide_tag": false }, { "name": "malware-download", "colour": "#713933", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882629, "uuid": "fc3a2e4f-4166-4785-8569-cb8dd066b7d6", "comment": "Malware payload", "value": "82f10ecd5cecd1cb579ebd8c1fb69770947aa58911a192f27feb8edbca834fd4", "object_relation": "sha256", "Tag": [ { "name": "docker", "colour": "#74eb76", "exportable": true, "hide_tag": false }, { "name": "malware-download", "colour": "#713933", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882629, "uuid": "1c1f51f0-642f-4fc8-91fc-692f824b9f55", "value": "T1467423ECE165D1F1DDA2ACF460A0195FB66BF6C4BF4F820F8840B33A0A65A752D919", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882629, "uuid": "a0a7b5ae-2992-453b-99d2-c49220817ca1", "value": "6144:jOpPA9f2tMZtxR8yRcRtzO4u+w13ygjksJ3JM80Og7niCk/ZXDdWJI:jMY2tMZtJutzO4XqgsfbQdkpDdWJI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882629, "uuid": "fc17879f-5463-4b64-b2a0-1739f93f05fd", "value": 337812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882629, "uuid": "9615d268-5f5a-4ccc-b5a0-99935c7192ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "247a20b9-b4b6-11f1-8686-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1789882981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882981, "uuid": "e5fdaddd-beb6-477a-92d3-176c220ef46c", "comment": "Malware payload (DDoSAgent)", "value": "a091ecb62207cdc24dd600da52fea193", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882981, "uuid": "6c469640-5a3f-418a-818c-e21e2990b5a7", "comment": "Malware payload (DDoSAgent)", "value": "6fcd1e7842a30d8084cf408208ab96c56797fa0c4aa920f3ad90fb2ca470b427", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882981, "uuid": "066b7d94-cddd-4534-b1ba-808868daa65e", "value": "T1ED864A137A29EB0FC62821300DB2CA942B691C9642D79117B785F309F9F21BD5DAEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882981, "uuid": "ffbb2878-bf6b-49df-8700-97e28c806cea", "value": "49152:bMDbvwMzKQ16MHDx5Mx1BtHo52Q427VsbgnGP4EH6zgHYzj7FW6Eiraia5pp0ZkT:lt9IvGiQ0kcP+rSi6NUnUjER", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789882981, "uuid": "54420a3f-39d2-4242-9eaa-1e7be0bec632", "value": 8126679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882981, "uuid": "3a41a931-b8be-4534-a24b-15b1f89da305", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f28c212-b4b6-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789883026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789883026, "uuid": "8f5cb8e3-cb66-4b55-83ed-25b0a7694d05", "comment": "Malware payload (Mirai)", "value": "c336d66b2c50d7a5388309dfb03675d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789883026, "uuid": "51b5ddab-8f1b-4b37-8793-8304cfcf6ba8", "comment": "Malware payload (Mirai)", "value": "8996a15739bad7bf32ea6755851c5ab0febe3dbeb4b79ae28cfb9e8e5987ca7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789883026, "uuid": "23a9aa33-0fc0-4a56-b4d4-f9d7cf15f0f5", "value": "T1BEF2E14209790108D16E217D1CABFD8E84B08B66D1BDC5F24FA8B423D917FEC79987", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789883026, "uuid": "a180df8f-b908-4dc1-9e84-77f5c39342b1", "value": "768:WCkGi0D/4BfI7dZnRh7/IN0BIesyoXKot5V4oEAIp62qnbcuyD7UHQRj0:WBGbyqhXrTBrQX4oEcTnouy8Hyg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789883026, "uuid": "c9107dde-da9e-4fc6-8e2b-8e52aef12d10", "value": 34912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789883026, "uuid": "497c5b3c-c0d7-45e9-8189-cd310acfaba5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d7d9247-b4bd-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789886056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886056, "uuid": "ef821d70-22bf-4c8a-982f-4b09fff4c065", "comment": "Malware payload (Mirai)", "value": "84b015d884db22e5c9dd5c6ce888223f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886056, "uuid": "579490cf-d138-41e0-afb6-5c6d0f580cd8", "comment": "Malware payload (Mirai)", "value": "af0d68490acd8cd31c27d830bef35b69b8517be1a2cad4085346577638a0acda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886056, "uuid": "1284089f-fb93-44a4-acaf-618533c732a9", "value": "T12B342346BA4C2371BDC588BBF21B0BCDB86A5398F09176FDB85629643900A2D17F41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886056, "uuid": "94ab968a-ac6b-439e-ac40-f123ae88450c", "value": "6144:cnUKvZAT5PHkN0MTWvpf4xDJ/yJbkYhyFyj2GX5ajB:4UKvOlPHbBoDEXhyFkwl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789886056, "uuid": "e7347344-950a-4df6-a87b-f9f67a3a414a", "value": 235248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886056, "uuid": "a3d2097b-dd4e-477b-9f9f-57a21536d8f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46bcd983-b4be-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789886474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886474, "uuid": "bec1244d-6f7e-448e-bcdc-7f20612f08be", "comment": "Malware payload", "value": "b1dc03539c8e55039a2c45b2618374e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886474, "uuid": "dba077ce-8b35-478b-925e-14dc514d8634", "comment": "Malware payload", "value": "c6498da1b745d711dfb206b378040d86480d66c9a4d57f108f1afc9ed287cd68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886474, "uuid": "df6f9833-d035-4c3a-84e2-6d1026ee4b71", "value": "T14282CFF572E64F55F6FDA97B08DF7C0B0A20C604BB4260E1B7D52566AC82F50B7382", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886474, "uuid": "0dd228c1-f2d4-4cc2-a224-3ff4c34d7125", "value": "384:M5uGxH6XREG6gZ5Hw8+bp2FyuPy7EZPR85ANaNJawcudoD7Uqh8mL:OxwCG6O5Hw8up2YuAE9qFnbcuyD7U5mL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789886474, "uuid": "e6b7ea18-6306-4c0d-88b9-dc878f39dcc0", "value": 18604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886474, "uuid": "50582ca5-9966-4213-8e16-1a2ab4c8c09d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ab00a4a-b4bf-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789886803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886803, "uuid": "e61055f2-92cc-435b-b847-42e7564e8f8d", "comment": "Malware payload (Mirai)", "value": "feb56ed3386629c1814bad12fc50ea5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886803, "uuid": "3b5775bc-7931-4779-9504-58d909c9bbd0", "comment": "Malware payload (Mirai)", "value": "3bbb0f2af5e2359cbd433386cd667fb2e789b299f75a2097ec6b6b80342376d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886803, "uuid": "a0021836-3f7c-4993-9b23-1a626e30419a", "value": "T1CE6423ED6FF4AC15E3572379302062C0E56BAC123152AE718CDBD2EFDAB9101C729D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886803, "uuid": "e70e3aeb-defe-412d-8100-ed52660a8a07", "value": "6144:RItFhxY8hXhj80ssiWHGnTZh7+q6fQtIUZGVOrIp2eNZCsBVvooPtUI6o:RItFzrbjttiWH2va7kZGVO8pLNfVvoUH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789886803, "uuid": "5d8011ed-57a3-4203-a438-4579cb694ec2", "value": 332724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789886803, "uuid": "6c61bb2b-39f7-4235-b05f-22aa6ab4528c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc1189fc-b4c3-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789888846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789888846, "uuid": "6ad6fad6-03f1-4dac-914f-b49ab7f399aa", "comment": "Malware payload", "value": "40347719edcebbfe1d6efe4c359185e6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789888846, "uuid": "26dab610-636d-46da-98c4-5e887aeef1ec", "comment": "Malware payload", "value": "00c197944eb18266913833e329a91fbb15c0fe8ad2b18b349cdfd8ebb0693d04", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789888846, "uuid": "bc0765bd-20bb-487d-860a-4f28441d903d", "value": "T1411633A61950A37BE40432716ADE728FCE357656AE1C9409F55E039F1C04FBBCA48E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789888846, "uuid": "bbd5f1e7-e3c6-4d0b-933f-e405dcaebd06", "value": "740b08f4ff3b69c9c5adb9182d224363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789888846, "uuid": "48a34f9a-c908-4079-bd03-9914ac53a7df", "value": "98304:GjaJB+ILMvy0i6tfXnVLa4Jl9pzb9vGmVdLHkQf1yS8:GuU/9tF24JPJ//LHks1y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789888846, "uuid": "7f8f7cae-bf75-4c89-9a63-9e53e317c603", "value": 4146688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789888846, "uuid": "3d6f089a-ac18-4297-ba83-cfe368aebec8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "414d05d4-b4d8-11f1-8686-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1789897632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897632, "uuid": "d72530af-15f5-40e6-814c-d83232d32660", "comment": "Malware payload (CoinMiner)", "value": "36aa7903d160dd47d79908b61f9fe372", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897632, "uuid": "cda84b15-4a64-40d9-ab22-600c8dc0f2bc", "comment": "Malware payload (CoinMiner)", "value": "9ceb5ff8a00510f7a86f999b3c2c6107544401614fa65421ff28959d3a5937cd", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897632, "uuid": "9d34aee4-e0c0-49c7-8ff4-0efdc49c4805", "value": "T13307335BBEDC44E8F9379138D902059AF37978558331D9FF02EC0B646D236E02A367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897632, "uuid": "6846ba28-7310-456a-8dae-b4f95f68130a", "value": "1dcd477cce07724ec6b817b3be71540e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897632, "uuid": "eb8f2814-bd1c-4b35-b839-2350424badbf", "value": "393216:2wuC7hHTodRGkXfFEThJ4UPSglZ23jfJuRIiPOi5uCCIOF1:yCl0LhXGTRSUWfyVPOiNC3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789897632, "uuid": "447e7787-2724-4404-8ed0-7cc9153a477c", "value": 16864836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897632, "uuid": "3610ea6d-122b-40b7-8d8c-e2892626e3db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f37d2f95-b4d8-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789897931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897931, "uuid": "cd054079-5ecf-492f-8a2a-f4a4034ebe6b", "comment": "Malware payload", "value": "10717ac1a3a8cef78ee767c7b7b47b54", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897931, "uuid": "dfc49c93-c322-45c5-8870-70d58a0a9d00", "comment": "Malware payload", "value": "d3047e2af0c7c2b84b214625f27b76d44eb3aa925f96fea65b427431706366bb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897931, "uuid": "491a8447-b3e5-4317-bb52-a8633ee258b0", "value": "T19D213A7020F1182326616A80B2339F527FF2DC4B059356CD75FEA93A6F86F06E1AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897931, "uuid": "0d3aaa1d-b70f-4c88-8305-71f66484c562", "value": "24:chnRUR8fAR25TgTbKe9HHIuCzCRpYdZeMYgTbK/lc9HHUeN:chRu9R4gTbBnB6gMYgTbYlwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789897931, "uuid": "f08f4c71-ef64-4bcb-a36a-26d0f22f18ca", "value": 1191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789897931, "uuid": "afafdf9b-be52-40ea-96c7-436feb8b8e2c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38fa60bd-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789898477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898477, "uuid": "cd276177-bdc2-4f8e-a1e6-60da007a5390", "comment": "Malware payload (Mirai)", "value": "718ce0256782bb684a88a98bf3e44615", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898477, "uuid": "86d22893-70cc-444c-a05f-4c4bb2648d46", "comment": "Malware payload (Mirai)", "value": "3839388a12f7cb3c00f2be585b029685f64315b97fe2939273ec4db85f636763", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898477, "uuid": "1e7aa895-7a40-4630-bdcb-67471a588c1c", "value": "T1CA5171CA50F00E7199E5D96B323B684CB189AAD7218A8FC694DC3DB92349FC0F5C17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898477, "uuid": "f2c229d9-e1fa-4a1e-9e9c-d252c08cfdb9", "value": "48:I13R1iap1pTCh1rl1Vw17l1l1bmCCP1bAh1cSr1Pk1iLA:Ue4TCObmoxFs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789898477, "uuid": "784b9b67-a5d5-4371-b2ca-88acb22646eb", "value": 2567, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898477, "uuid": "639b0f8a-f563-439c-91fb-8033cce760ec", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1789898485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898485, "uuid": "63778e98-a4c4-4b92-bb62-c9b5e0476d29", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898485, "uuid": "63b1de8e-c8d5-4594-b669-131c19c03aef", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898485, "uuid": "0623c358-0f37-4e7a-bad8-510332a8ba7a", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898485, "uuid": "2f3c7e21-c59d-48e0-a18c-7e338a7d9269", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789898485, "uuid": "65a9aabf-7a9a-488e-8c8e-7982c6a8ad1f", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2414e67b-b4db-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789898872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898872, "uuid": "2b0383ec-8a7b-4db4-9749-bbb7a43cba80", "comment": "Malware payload (Mirai)", "value": "23f401c030f809ca5dab3a3d2ff169b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898872, "uuid": "fa5d71ca-785b-4fa6-a5e8-00fb15af1dac", "comment": "Malware payload (Mirai)", "value": "66c977d91dcf53fd885e0e1ce25d99f32b1cc5fbad150eee94b80aa265c9bb60", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898872, "uuid": "4325c972-27c0-4ad2-8dab-5d3f72629387", "value": "T18F4422E14D1202F8C4A072B08AE6677D9E2ECBA763BD2CC3E9C457504A3E575AD77B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898872, "uuid": "2e72365f-c834-4096-bfe5-ebdbd50c6886", "value": "6144:5Y+SfS46VUuqeObj92i4yKcbuI7k49SfQEY:5Y+Sfz66uqlbEihiIQ4qQEY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789898872, "uuid": "ad806c92-f399-40be-8157-5e8bd647fd56", "value": 261348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898872, "uuid": "03428783-9731-48f5-8f9f-e69eb92e6612", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e728176-b4df-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789900768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789900768, "uuid": "31845daa-6bac-46c6-b63e-1a2fd88828c0", "comment": "Malware payload (Mirai)", "value": "53044370bc902a5be5aaa5e26949026b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789900768, "uuid": "c210d6c4-ec40-4c34-927b-fdbaa1ec13a2", "comment": "Malware payload (Mirai)", "value": "9bf43739e55b8a826d2b059dc202395701ddf3d3eb2dfe96bf07e3b56a55c2dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789900768, "uuid": "a405f708-703e-493f-915f-5f7bfc80f562", "value": "T1EA4413CD5407E5C786E50E3D9E614672649928C7A7BFA3CD203CEEC8B5D214BB0DE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789900768, "uuid": "334acd18-3a0a-4f68-882f-5b0c1f61d1c9", "value": "6144:ILs21s25nfTNb2Nyug/HFQIAE3jrPCoJ3FwuSyS1Y68NlJI:I75rNSNWHXCoJ13tSShI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789900768, "uuid": "1608331e-5ad5-414c-83e0-b94264bd43e3", "value": 265192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789900768, "uuid": "57e4fec8-0ed0-4ead-b6d1-6ba3f875da88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6891b70-b4e3-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789902553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902553, "uuid": "9b36f48e-7261-4ebf-8968-0c8c9185bbc3", "comment": "Malware payload", "value": "b02396478854bf6b8c74df7c0e9c9708", "object_relation": "md5", "Tag": [ { "name": "134-122-189-74-8080", "colour": "#55b6f7", "exportable": true, "hide_tag": false }, { "name": "134-122-189-79-8080", "colour": "#1e6598", "exportable": true, "hide_tag": false }, { "name": "134-122-189-98-8080", "colour": "#7b09cd", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902553, "uuid": "bef88194-765a-4880-8b1a-3eb5896def65", "comment": "Malware payload", "value": "ed8b7ef6823693b68301ade76e6280aecdd267db497679969d00dd7c54761790", "object_relation": "sha256", "Tag": [ { "name": "134-122-189-74-8080", "colour": "#55b6f7", "exportable": true, "hide_tag": false }, { "name": "134-122-189-79-8080", "colour": "#1e6598", "exportable": true, "hide_tag": false }, { "name": "134-122-189-98-8080", "colour": "#7b09cd", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902553, "uuid": "0207540d-6778-4290-ac7b-dd4fd7b5855a", "value": "T1CDD633E26B5004B0D6B7E3BA1A115A2E8373B8531BB4D7DB037CA91A5F031D16E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902553, "uuid": "1bc7ec3d-df16-4066-9974-749a473ac8b2", "value": "965e162fe6366ee377aa9bc80bdd5c65", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902553, "uuid": "c40eafea-a306-4da1-aec3-fe8b5eadf988", "value": "196608:607L0sKYu/PaQrBu51B7TQscK2pUZMAbUEO3oDDJf6Wv/VJ8KnWWo3GYg4r5WwcN:5FQrU51bgUSAoEO3o3Jx/VJWQ4rv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789902553, "uuid": "2047ab9b-76cf-4af2-bda1-101c4198e5a9", "value": 13430281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902553, "uuid": "9883fb25-8fd9-4271-8b32-6649c306a310", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8565d645-b4e4-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789902900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902900, "uuid": "41b209a0-4cad-4bdc-a898-28b078b54402", "comment": "Malware payload", "value": "7eecbe007d249bafe356cd78d969f2f7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902900, "uuid": "b9944e85-face-41c2-9707-ac2d16a571dd", "comment": "Malware payload", "value": "553c9a51d663549fc6f245161d734033b454887b688ab68a37ae2159d5f2d333", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902900, "uuid": "6d271c87-a0ed-4053-bdc5-b354cd0e7b59", "value": "T1FA32C1D07564C1B48BCE6028473A0F59DDEF6C020D73C6B3CA0C8499A9A14DAAA659", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902900, "uuid": "492f8fbc-29d0-44a5-a611-9e74a6545809", "value": "192:VeDu6TNWy0Em5nhn4BfXZ7L4+gOZPlmdTSL6USR+RRkJoW4X6dpTqNtDqG7l3WE:VeDCEm5SBvNL4h4Pls+R3XITqNtL7lv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789902900, "uuid": "f407c996-28c5-4dee-a772-b4bb59e2641d", "value": 11520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902900, "uuid": "b216779c-fcdd-4745-9c1e-77d4a135e18a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73238d07-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789902984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902984, "uuid": "e637815f-ce5d-4bc0-89ee-d551cd331751", "comment": "Malware payload (Mirai)", "value": "881af3dd272af36b0b7d16eeb034d510", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902984, "uuid": "ffa0ba11-855b-43bb-b872-50acf6230f8f", "comment": "Malware payload (Mirai)", "value": "0b98075245e1454db217330e5f8f9eefe8ed995ce3f9009c6687e95596286f81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902984, "uuid": "63cb067c-7140-482d-a730-e6ef2d1292b0", "value": "T13392C06982669AD2C47104B7A1154D8EBB3B5175F0EB70403362D7B0DBC7043E7EA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902984, "uuid": "fd9f80f3-ecfc-494a-8056-23fc1e575f4b", "value": "384:Dhs8o6sY6ut0jEumRVPIrMOkuB4we03wrUUXomdGU53DtB9ecW:D9xt8mrP9OkuqwegEJXo3UfW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789902984, "uuid": "1dc95334-9975-45a3-ac65-72b7bf29dd7f", "value": 20684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902984, "uuid": "334a6d98-56e2-4c5a-a641-4e0bbe67c6b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "730ad2d2-b1a1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789902984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902984, "uuid": "f9394a8a-18be-44d5-828b-03c61d8d3146", "comment": "Malware payload (Mirai)", "value": "bfeac08053890d5a5b3baba8c6c09a1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902984, "uuid": "eeb58649-81ae-4f37-9291-3646ba07e5ff", "comment": "Malware payload (Mirai)", "value": "44df4652e287b59ccfcb55afde831316f384b1a78212c04b9f6763c831882507", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902984, "uuid": "4421e800-bc3d-40c6-a625-ee0bbc8ba14a", "value": "T1DDB26C86BD814517CEE52276FA2E928C37655B74E2FF33039A261F642742A1F0F3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902984, "uuid": "789717ec-8699-41a4-bcc8-abf586366000", "value": "384:9m2m2FfIMN9og36J0qQ87+2eZvaBcjQOFphM4VXp5oxF5Bi6vW6OFx4e:9/y1Z887+zvaOPFXM2oPi6vWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789902984, "uuid": "3db63580-ccb2-46a5-9a2d-2817753ebd17", "value": 24500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789902984, "uuid": "7d7ed769-9f51-4ff0-88eb-cff8e1855e9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6902f05f-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789903047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903047, "uuid": "167835a2-3a75-489f-b037-b3dc8298fb99", "comment": "Malware payload (Mirai)", "value": "a045c89f1141fc2696734ec5deb764bf", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903047, "uuid": "4cf4e0f3-61e9-419d-b0ca-9cdf44ebdd31", "comment": "Malware payload (Mirai)", "value": "15a3eead944a09c87b7cfee036850d84dfa2c462b61321db5f747a3b999dcc34", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903047, "uuid": "93d07bc9-416a-4ac0-bed8-28decf391da4", "value": "T1F1D312FF982CAD7BCA3D816AD507B36254A17137DEFA819ADE7E2C440E03490961F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903047, "uuid": "56f988b9-205f-414f-a206-d1a45bea0bac", "value": "1536:Hmx3+KaSUY4sEXIGzsB/EdaAWq3d8LM4b4pI1N+4m1b/Y2BmUdQvUCD5eO0hcu+C:Hmt+oK5Lz8zpid8LcxY2BT8D5eZhaBT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789903047, "uuid": "d8c914e5-fde2-4581-bb52-a2cd13cbce1d", "value": 137096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903047, "uuid": "a7112716-8c1c-4425-9acc-dbf15bfba8d5", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "690dd15e-a6f9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789903047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903047, "uuid": "4fb22791-268b-4a78-9e14-55dd8710e9b8", "comment": "Malware payload (Mirai)", "value": "b488b211ebb4c3e69322563a8247176c", "object_relation": "md5", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903047, "uuid": "603ea381-af24-47e4-bda2-e34f501e1179", "comment": "Malware payload (Mirai)", "value": "c7c243ae7f2496c83d680b6c5ed8e9eaf03560bcaa9d0d1ba5127ec469b5ed4d", "object_relation": "sha256", "Tag": [ { "name": "94-183-174-77", "colour": "#cfd1be", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903047, "uuid": "1673bda3-677a-46ed-b458-449114ea84e6", "value": "T15BB312008AD42A9DD0273EFDDA1EC5E05FD848F6975981E68E653E9CCE781BD06A0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903047, "uuid": "5846abe7-ab2d-44f0-9162-bced3bc3f30e", "value": "3072:yEdK7u4eZKjsL5WDdIbA2lGjyL+pF0O0eAG:39KjmOgJCF50eX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789903047, "uuid": "10b46a14-27d7-432b-bad5-46bb13b924d4", "value": 112304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903047, "uuid": "154935ca-1ca9-40fa-a0ea-3d3a7355234f", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "155f61ad-b4e5-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789903142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903142, "uuid": "cea5a8d5-12fe-49a4-ace0-a55be9086122", "comment": "Malware payload (Mirai)", "value": "b7053893b81390e777a12370825483ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903142, "uuid": "67c8f7bf-1e13-4889-8655-41a01195227f", "comment": "Malware payload (Mirai)", "value": "6e721fcaf05e978838c49fd521e79bbf57e29e41e86c99041a95c1d70d847355", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903142, "uuid": "71aa4bf0-b263-401b-9164-252e48677d59", "value": "T1E054230ED7C2FD17BC5AB09C99277DC33228975CAB628AD180EA2750B514E7B8B133", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903142, "uuid": "b476c1de-8168-44aa-912a-7758a1c6e86d", "value": "6144:IcjLF9FcciO090EJtsAX+sC+Hln2rKjBbgby5cEKt1iAjp:jbOck9fJOAXLC+PB8by5VnEp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789903142, "uuid": "c473d8c7-bc71-4c3c-8c93-150f352b635e", "value": 287292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789903142, "uuid": "c459d242-3c1f-45f6-904e-cd40d4e0d0af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1ec6c25-b4e7-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789904264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789904264, "uuid": "5fabcb20-de4a-4284-b7f6-7a5d717d1c7b", "comment": "Malware payload", "value": "ae62bd5599b0b6a1d371c40fc62fe7a6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789904264, "uuid": "ec004ee4-08ba-47ed-9cad-4a5d6a7ba96f", "comment": "Malware payload", "value": "2c0b9631a655a5a90fdb82155b8b29dafb3df6ae38cbbbeefebf3fbcfdfc265f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789904264, "uuid": "7e00a6d7-2529-4cfc-996e-2ae075b2982e", "value": "T1CF34F06DCB87EC4DB5AF9469FF4C500230A054ACDA05EEF24997EA36C40E8DE9CE52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789904264, "uuid": "7eefa236-d16a-49de-a810-3475906370b9", "value": "6144:mrvjtc8BaGuR8N0rFtFiBhfDssRjf6GGGIUj4:AZPuR8+hCBlss5CGGZUc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789904264, "uuid": "d4e79175-ed06-4296-9dfe-a91f913c9da1", "value": 247880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789904264, "uuid": "676991be-6238-4490-8b35-c6de2b554a96", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85939fe1-63d1-11ed-ba09-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1789905371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789905371, "uuid": "abbf16d7-36d0-462f-91d0-900089b44c3d", "comment": "Malware payload", "value": "70275dd3802e0f1684b60365fdc13992", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789905371, "uuid": "5d0e1e8a-53a8-4e4a-844f-2eca7ac65474", "comment": "Malware payload", "value": "fc108bc7b13a8280e5f9a706de05968b7236f2acbe2ef4ac024c73224960b243", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789905371, "uuid": "96be4461-dddd-493c-b200-b5a92fe6853e", "value": "T19342C0CCBA45EAA6F6145DF27C3C45BC869BF6AF0A66307048E5B84CC6054AB1E0F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789905371, "uuid": "a051a43b-ec59-49b0-9387-494ae6e38a95", "value": "192:fTu2PzRurki7SLDLVpVovt9SbVySN6TQ3JuGpymy/qD1zIWRzYFbYWvpK9pGu:flzEBkDOvTCZuQEkymy/Gf+3pK9pGu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789905371, "uuid": "8d0ce67b-dec4-4777-9889-ae268e1ecdf8", "value": 12492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789905371, "uuid": "5e7f16ba-77c2-42bc-90d3-f4ac0e7e153a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "022e09bb-b503-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789915995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "751b164d-eb4d-4a1f-9728-38f7bfb7735f", "comment": "Malware payload (Mirai)", "value": "87db05e3126a394ccd34d4edd108690d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "9a843267-e5d1-4496-bec8-d8bfe900a9e2", "comment": "Malware payload (Mirai)", "value": "3271d8a41b2bf7c13725e1c7c00bd06ba6a36d267f0d0ffd16ba6303256855d4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "66d97dd5-3ca7-4dc7-a12f-fed56976cdc0", "value": "T1CE357C5AF2F374FCC067C030439BDB62A835F47911226E7B25C4DA352D66EA01B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "9508076b-3767-4d19-b8a8-e72ae54ae960", "value": "12288:VAgR+9e8dSuKYnXcoctL/e34epGG4m5qBrpmy/hCA2m5Sd5k:VAY+9e8dSu9X/wre34eIjmiVYAtS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789915995, "uuid": "5535f9fe-fc2e-4707-b97a-046eb9b1fbbf", "value": 1094480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "3c8cb8e8-3d69-41a5-ba74-4f08c073b07e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "022e56b4-b503-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789915995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "97f0fd44-eec8-4c9b-a23c-ba09d1052093", "comment": "Malware payload (Mirai)", "value": "d356d36e71cbd21fc0109cf076ed8bae", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "080c97d4-f0b3-4957-89f5-b960bd3e4155", "comment": "Malware payload (Mirai)", "value": "6317529de86cd39f3a9cb87d472c3c3bea823c83859f4c73628c5976cdaf99a5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "14d5c92b-1f3e-40a5-b89a-9876e16d7ef1", "value": "T159D42855F8809F61C6D139B6F75D82A873074B79D3EB72069A244B3437EB86B0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "0a081c58-c162-441f-89fd-8fb9b2f29962", "value": "12288:ZCC3f5R9PKR416laxGVo9lZbqBJIBXJyNUNI98pbKKi:ZLf5R9jOagG9UJIBXeV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789915995, "uuid": "7a39f088-1335-48f9-8926-47b38017c0b3", "value": 612356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "8c50bea8-1d46-460d-b141-d5f3618e5b32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "022ed071-b503-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789915995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "93c42707-c666-434a-afa3-58c194f5aafc", "comment": "Malware payload (Mirai)", "value": "513f38c130b7720f6823170435f97c61", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "077ad9f1-674e-4833-8b91-9cd01701d0c4", "comment": "Malware payload (Mirai)", "value": "14afc38458bd9ba7c9cc15c43c46e45dc607f33cee69a6afb161d14f03771460", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "e5b02348-e26c-4d53-bee3-ec8b4f142aaa", "value": "T1FAC4CF93F2719ECBD11A4FB8002DE230874BE9A21323B5C0F67A83551DB35A9FE597", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "0933b0f2-6aab-4319-93d0-f48388f60cd5", "value": "12288:1iS6kpMl/fdhG+d2ZgrBJ8iewfyPExA98pzKCOm:kl/fZEZgrIQI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789915995, "uuid": "f03feabc-e941-407c-89b9-67554cf99b3c", "value": 575228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "1fbf9e1b-7cd8-41ba-9e3d-1dc0157ff85f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "536a703c-b381-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789915995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "51503875-42c9-4577-abdd-cf5b6457e20d", "comment": "Malware payload", "value": "7d7c28dbf7e36faee6f4627bff47150e", "object_relation": "md5", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "55dc055f-37d8-4d61-aa1e-4e84274f3b81", "comment": "Malware payload", "value": "2e1f662500bb0850b68c7117d7eff513067e9686b6b290d9946033d9d725b40c", "object_relation": "sha256", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "b371cd13-2e10-45e3-91a1-20c0524771e7", "value": "T11C753317952CA813FCA343744B8D73FA8AC5B05B0D898A6B5EB55221CD5FFC40E2C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "0e049082-8f9b-41cb-b1ca-50ac388f3449", "value": "49152:AicSAU9wspVaH3Vd0GE2eprdi89L34WbN:lcSGspVaH3Vd0Gvefia8sN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789915995, "uuid": "99868953-824c-48f7-8d0e-6879617a9bef", "value": 1584655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "1a9a7bfb-710d-4914-8ef8-da4e88fcc6fe", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02675061-b503-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789915995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "84da7d3b-14c6-47a2-9a57-6e1f978376da", "comment": "Malware payload", "value": "7a4d70b7fdb9cdfdc3abd36609228336", "object_relation": "md5", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "4e2d7ea7-b653-488b-8796-11801388b5a1", "comment": "Malware payload", "value": "518b2458cd4750cd6111032b8758029bfb1000187e04e28bd273f5be8c15c16f", "object_relation": "sha256", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "188d41a8-a14e-4f2f-a472-72013a5e8cde", "value": "T12D753317A668B803EC730375478D62ED89C9B0170E949EAB5E7943208D5FFD84D2CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "eade5104-f232-4fa1-b210-259a288550c1", "value": "24576:pw8LxU0DqGW1sKFTwE0kJKEYpZLrh8i/0cdHT0Q3gfXa2dtoHUlzfPZ53bFmOWd:pFe0+GW1ssT3evh5/0CIQwfdda0J33a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789915995, "uuid": "fb4c66fb-33d7-44c2-87b9-ea3b0f192c9f", "value": 1566735, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "45c2c367-3b98-4ec9-8029-0e92ccc28399", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "026f76d4-b503-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789915995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "f5af0100-28b5-40fd-b2af-3f8258288394", "comment": "Malware payload", "value": "725440c81a39338e3d51d293fe430af6", "object_relation": "md5", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "5ed07f66-ee35-44bf-b88a-176ee5deac95", "comment": "Malware payload", "value": "5ffe70a64449787da961f71c1d11615b1b8d0d4747965d73d0db298f203c1e3e", "object_relation": "sha256", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "d38e401b-4882-4ab1-803e-3e0d21d065d5", "value": "T110753302956CA413FCB342748B8D63FACAC9B0160D959A7B4D799321CD5FFD80E28D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "82782463-10fa-40b1-964f-4a7153bac433", "value": "49152:kpAeq0uRqw/D6HdHz0qgoI7RdksHz3WF9:deqWw/D6HdHz0qhIjkYiF9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789915995, "uuid": "05cc75af-3e13-4902-9236-7843c8ff27f5", "value": 1584689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915995, "uuid": "7be4dddd-1cc3-4bd9-aa4b-80c946d51354", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14d54431-b505-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789916885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916885, "uuid": "1ed2c32d-46f4-4f3a-812a-f32e80435724", "comment": "Malware payload (Mirai)", "value": "419670c23834c916c0978efd5a456081", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916885, "uuid": "a00498b7-a7e4-45ab-b8fc-7787954cd3e3", "comment": "Malware payload (Mirai)", "value": "e56d1ec6e0a5c05cb082d214b07751cf200e3546e399f310f163422d9fef85ee", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916885, "uuid": "e25d17a2-1715-45d2-a026-ea78bb26dc22", "value": "T103F46C537B208F95F335D57004E386E99AB822920EF7819692BCC2207E446BD6D5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916885, "uuid": "1112b7a9-3ee2-402c-84a0-cb77693597b5", "value": "12288:OaS+Iolt6Lm7DcAxrt7R1FD7+VyLdk5KCtsVmlIaPBJ8p+yc3YH2eQ:OaS+Iol6qAAxrBRD3k5H5ByqYZQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789916885, "uuid": "c77e90a9-5906-41ef-ba23-5c22937202ff", "value": 731340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916885, "uuid": "5380823d-c96e-444d-8e19-56d7cfc194a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a4e78ef-b505-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789916894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916894, "uuid": "c3573aba-585e-481e-889e-529d7bd26c76", "comment": "Malware payload (Mirai)", "value": "926f43e718e6df335586fc73c73edfb8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916894, "uuid": "92456c01-453d-456d-a086-2a021f800b5f", "comment": "Malware payload (Mirai)", "value": "e7691351a8da0b42ecc9cf7718f2425394bdaefe559426d83ecd646e285b4c2f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916894, "uuid": "0d95e6e4-48fa-444f-9338-5ca46b431c44", "value": "T184E49D127BF21125D2908634C7A1D7A1B7479BE964E4070B9FA0CECFEF561601E86C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916894, "uuid": "d322084b-8ada-4908-85be-e2316f407d43", "value": "12288:42NAnctn5T2nTFUIjBhRu2y5HgcFghG2Es5oA9UT:4tw5T2X08h1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789916894, "uuid": "3c3dc10f-382f-420d-8a93-c5b1065038da", "value": 667768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916894, "uuid": "f45d0538-46f6-4d99-969f-232badbec66a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bcf5efe-b505-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789916897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916897, "uuid": "0b1a7a66-046f-439c-ba20-3e7a5ddef13f", "comment": "Malware payload", "value": "aa0ff184fef4b677930782f07ef1563d", "object_relation": "md5", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "hypixel", "colour": "#7f5869", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916897, "uuid": "e374f943-c017-4e08-a218-5a43dffb284a", "comment": "Malware payload", "value": "256ab8c83d76a5a2f23e7d4708862f299bea19f8f8866b47d20a5f8dddab99b1", "object_relation": "sha256", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "hypixel", "colour": "#7f5869", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916897, "uuid": "9ff5d27c-699f-4753-9187-f163756cdf88", "value": "T1D895F2CDFDA0E17DE71B51384842C877E4BD889CE68BD05B25FD0E6A48628C52B43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916897, "uuid": "6cc24a8a-5b2d-4942-b776-040ee103a59f", "value": "49152:5zDcgiG55o3QSVUdN2Ocut611MXCE33WgKy:a863VOzN/I1NAWgKy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789916897, "uuid": "3c4e1f5c-e399-4d86-8d4d-4cb395393443", "value": 1955813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916897, "uuid": "ef56f06b-7ec9-44e2-b926-bd276f999008", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e395257a-b50b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789919809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789919809, "uuid": "413784ce-2435-4200-a25f-7c4f3f7b40ca", "comment": "Malware payload (Mirai)", "value": "0abdaaa3b3ac3079f4d6a69939832fe1", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789919809, "uuid": "fee60ea4-c050-4477-bb7d-002f7d218dd7", "comment": "Malware payload (Mirai)", "value": "c40f75eccdca4fbe21f4c79a7b46df138bf7db13baa2aa1277f077d3bc520121", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789919809, "uuid": "23ee166a-9e25-4530-a812-270ce57502cf", "value": "T1BBD4AF55FD59EE93C4B2D236CCBBC2917136E8AE9BE2C315290A517C3C172399F193", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789919809, "uuid": "32e7a24f-7165-4bda-924e-637883292f2d", "value": "12288:ZrRUtdkepif3ENp484hR6+IREoJFBMw96xVBA4pzeCMiTxcNzWlC:mickRLzBLjTxcZWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789919809, "uuid": "6f47eed1-8bd5-4836-bbf1-a4dfe72cd346", "value": 642576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789919809, "uuid": "67a1a62f-80c7-4498-af0c-7dc01109dc0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7916bb6c-b50c-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789920060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920060, "uuid": "a6c19ced-dbdf-4a4d-83f5-bc43eddf60b4", "comment": "Malware payload (Mirai)", "value": "dccf49327723d286d75f7f2216c02449", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920060, "uuid": "1051dbba-0f58-4b9e-8f8a-2b0ff1542473", "comment": "Malware payload (Mirai)", "value": "16d40dcf8d70a205344a29f6a8540c1924e1064caa2945f84b851670208ed16b", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920060, "uuid": "3bd3a219-6f81-4f26-a814-a4b703e39fc8", "value": "T1FFF49C4DFA62D471E03294B2058FCBB39534E13512439BA7EF970928B8627A0DF9B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920060, "uuid": "9ebf302a-7ee1-404e-90d0-54f37bea9cf7", "value": "12288:yCGqmgRv60G877lhwfhHyqEBNezEmae5bSCYNDajs0Nttoq6MbVtSZ3t:kgRv60G87RhwfhSqE7ez0e9hYNujJ1Tj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789920060, "uuid": "be62a950-ddd6-45a2-96f0-9a6fa8a0b34b", "value": 739980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920060, "uuid": "449e803e-4b22-4ca0-852d-c1febca9fe6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "598cc5b3-b50d-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789920436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920436, "uuid": "bcce9aa9-5b2e-46a0-b554-4b1930af3955", "comment": "Malware payload (Mirai)", "value": "65c78c2dcc0a6b1671210d259e0d23e5", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920436, "uuid": "3267456f-ae1b-4876-9dc3-5ba4db2d93d4", "comment": "Malware payload (Mirai)", "value": "563730c52030faec7d733c535f44322d010e3098abfcea6f9fc0f815b08a5467", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920436, "uuid": "dff28d23-23ee-4840-a90f-e5be488e0296", "value": "T148252846FF441D5EDC358E32D9EF12B83331E1991A12D42F19ECB7786A4B2A09F066", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920436, "uuid": "df206705-a45b-4713-abe8-471224591090", "value": "12288:mc4YS/Jgk1E6AOYP6gDwNoVsjCyf1/5NbYjIelo:mcTSmkdAOYP6QwI4B54Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789920436, "uuid": "50ab8526-746f-4a14-9be4-f3a7bcc135bc", "value": 974672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920436, "uuid": "ee68d805-25f4-4fbd-94b4-c16617a022e1", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "730cde0d-b50d-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789920479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920479, "uuid": "93db1e28-603c-41d3-8eb6-172b79a62e45", "comment": "Malware payload (Mirai)", "value": "b22c869d03094b4c3f79fc915185374e", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920479, "uuid": "0339e35f-1c5a-42b0-8b72-8157d839ad7e", "comment": "Malware payload (Mirai)", "value": "55f9c2bf3308d0d1eddb467ff672409f0526e2ed67d44471c03d1b67d1106113", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920479, "uuid": "098b14ca-84ba-4957-a904-29723c17cbcd", "value": "T13FF44A15F9C19F52C9C2293AF68E42483363577AD3DAF30E9904973836979BB4F2B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920479, "uuid": "9b338753-8adf-4c00-bfdc-feb29d6699cc", "value": "12288:T1/wO02+H81+S0X6jroKrYrhScJrn6lWTsj9HjKMN0sdxRx7rfnc/xdPTf:T1UrcRjroK8hSXl1jnnTrubPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789920479, "uuid": "f25a321c-b1aa-4576-98cc-32bb2a632d00", "value": 766548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920479, "uuid": "1c2ac864-2ab3-4814-8356-c19d60dd8de5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c71257eb-b50d-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789920620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920620, "uuid": "12e51acc-52f4-47e4-9122-e58543dca11b", "comment": "Malware payload (Mirai)", "value": "0e20346892fb531c7ff7d7148645ce18", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920620, "uuid": "cfa37170-3fa0-475d-b9f3-ac712fc57c5b", "comment": "Malware payload (Mirai)", "value": "70cd2f6246d91701dc3ec2063cfbdcd1fa1ce4e32b6a105e8a9eabda5c720640", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920620, "uuid": "7c3cb4d4-7afb-4a81-95f3-0bbdad51a8d6", "value": "T149058CA677064F54D225B67509F3C7786AC471A20AF799C9D362CB107A043EC6C2FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920620, "uuid": "8e780993-aae4-4085-b58b-6853ca948758", "value": "12288:gra9RC9RAfPha0d/sXE+BjWKEawsewgXpIEgNRWcMTlny5mSouoG:R9JG0/awBX2NRWcylbm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789920620, "uuid": "5a2ff07e-248e-400e-a5bf-4be1ffa326e4", "value": 795656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920620, "uuid": "6a69f7c8-18ca-408b-8919-04f569a65c4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2c25015-b50d-11f1-8686-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1789920640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920640, "uuid": "ab13a292-915b-47ac-ae54-a459619c94e6", "comment": "Malware payload (CoinMiner)", "value": "d7d5537063c664d2737ccc4055375b81", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920640, "uuid": "6506eca3-8ba0-45db-92ff-abfb9439171c", "comment": "Malware payload (CoinMiner)", "value": "6455172df4f935d11d07e3442c62cfcf1050bfb87af5b8ae530ea7ea55230328", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920640, "uuid": "b4c23f2e-eff8-43ae-9869-ccc598f2e7b7", "value": "T18E5633376A72D04FDE2873BA53616042E5E0E9AEF9CD442E574533A90B0F94D0BCE9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920640, "uuid": "569a5df2-b84e-4041-8978-22cf06ebeaad", "value": "15596bcc7e7948f19395f593298f677a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920640, "uuid": "ab953462-ce27-4563-ad81-1d3871aefdd8", "value": "98304:NY4XXik4L/CxUxOnBBGGRZj52nJSbm7Sp3fPbH/tIBTCALolftLuakiH8cR:NYMXd/EURZj52ng79DFI4Z17kIR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789920640, "uuid": "4212ae36-91fa-41f3-9901-275b4090ae2e", "value": 6301696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789920640, "uuid": "45d7cbaf-d56b-42d8-a0c4-e407564cefff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41aed0b0-b50f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789921255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921255, "uuid": "a575590f-04d8-4110-b5da-89e59d27c14c", "comment": "Malware payload", "value": "3dbddcc7372a58466e90807e2acfbd03", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921255, "uuid": "3f80aec0-3800-4da1-b5fd-a239727a6654", "comment": "Malware payload", "value": "97c9534a253ec32b564d1d4d6470b0a30fb4b4ae93d46131fc63e2a76a29889a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921255, "uuid": "df08b689-a1a9-4b2e-b296-b6f5f3f498a4", "value": "T174C1727AA804DC4BEC61BD59003EBD3A54CD897B47A9CDBC9BDCCE0506129BE2F91D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921255, "uuid": "d33a9715-60a0-490d-b370-5b4fb28f3b0a", "value": "96:ERydMPOOTYosLvnK0gg5cFeaa3cw2RljT7cg1xqzcfxmFfE/qclIKEoouW:bdUOO0omnwNQ2wgnqzcJmp6ZoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789921255, "uuid": "f70eae84-d597-4e7d-bf9b-da6c56ea7dee", "value": 6008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921255, "uuid": "f6fd6c46-38b5-4d8f-bc29-7a104fc38953", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b8ce79-b50f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789921388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921388, "uuid": "ae8fe4cf-064b-4596-8ec0-a089fefea7fe", "comment": "Malware payload (Mirai)", "value": "9132fbc41bd9a2fffd7c0b75d1a8267a", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921388, "uuid": "8fa0c7fa-46a0-47b9-94d5-74ec966ca4cc", "comment": "Malware payload (Mirai)", "value": "843e357ff732c605512dc8feb9fd0468e4694440617b63d4ad7605a470eeaca5", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921388, "uuid": "382651dd-9984-4c7a-92c4-76de85953dd9", "value": "T1DFF46D59F990CF62CAC61A36F6AE42583313437DC3DAB30A59089738369797B4F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921388, "uuid": "14c80b26-8adc-4874-9f0b-56c45061bcd8", "value": "12288:BEaZJZ+em05+bxX8d8z8SSaK2aJKVHjKMN0udxurSro6IOKRi:OYRh+uK8SVjJnho63KR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789921388, "uuid": "af59f823-350c-4fd2-be0e-8244548694ee", "value": 732280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921388, "uuid": "72f6c8b0-ceb5-496d-8a6e-2584c0b24da2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4c4980-b50f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789921570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921570, "uuid": "c5f99950-c2f9-4672-ad74-71eee274c938", "comment": "Malware payload", "value": "c374a79823588e27415cb3fd8ef255ba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921570, "uuid": "d9dd46fe-a18c-4ede-bebe-0961694e4f7f", "comment": "Malware payload", "value": "ac706b1f92f9927dcca7fa6c6d39c6cf3ebb50a9b05d18bb0d3acca7749bc21d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921570, "uuid": "97ccf50b-b977-4c99-9977-72f943ea2fef", "value": "T1C1B186234829AC721157C6A4B146762DC0EA827BF342C65A72FD815C9BD3DC385E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921570, "uuid": "b2720cde-302b-4e44-b62a-3bb1839cbb7c", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGLq/GNt7sGrExml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PHGNt7sK1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789921570, "uuid": "b55cdf25-eee6-486b-9511-ec68a2f021b2", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921570, "uuid": "b6794824-0d90-4687-a5b8-cd53f2113fce", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b025db-b510-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789921933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921933, "uuid": "cea924f5-d32e-4190-8e67-d8565ac5efcf", "comment": "Malware payload (Mirai)", "value": "366584b6059597d77a0a084cb0e3f1ac", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921933, "uuid": "003aa6cb-68a7-49b7-bea2-15d52488db44", "comment": "Malware payload (Mirai)", "value": "5cdf2a968e2d6d7091e919e5d43d0816f0d1a4ddd8ed42f2b6c9a8af7c0d3a81", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921933, "uuid": "9a951798-754d-4e36-990a-fa578f7e824b", "value": "T1D4E47E59BA4FFD82D2C6D238DE4DC3A1F22771A4C65392A63EC1021CD8CB995CFEA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921933, "uuid": "0bb7cafc-a502-45a0-8266-4f273e74e87b", "value": "12288:K4I0t4sHYarY6apAlbocw7Pl3oMNqlJj9:CE/4oYLp8K3Sd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789921933, "uuid": "c9868e55-2da0-474c-988d-405c5473fccf", "value": 699240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789921933, "uuid": "191da2e7-f429-43ef-94f0-d4e4e78cf852", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fd1de0f-b511-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789922057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922057, "uuid": "f5ac6857-b43e-43b8-a79a-0069c225264f", "comment": "Malware payload", "value": "419d40e02d253c6b93f00045f7ce9ee2", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922057, "uuid": "29305ef7-5026-4797-898d-0a32cc470deb", "comment": "Malware payload", "value": "a6b7aef21f25c01d0b18b2d487de2b898a0cfda7e9e603d80edcb1267759c335", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922057, "uuid": "cb5d8f06-eb1b-4690-8d5a-3acf378fd007", "value": "T118F4E112BAE961F1E167C930DA12AB79E3B6F4118B30ACEF4150867E5D132D02E7D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922057, "uuid": "7544fb1a-c144-431b-afe5-d367a7c6c79f", "value": "1ada39442be6690fe70cece4c303bc60", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922057, "uuid": "479353e1-5c69-4fa0-8ffe-41c66e59a013", "value": "12288:uJxNoD4M11zISOs47xjeolJ/7NWHpKSgJpygZvJpRR1q1f:u0x/zIjsoleoL5XHy+vJpRR1q1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789922057, "uuid": "61cfc4bf-15f4-4997-9cc8-10effce9b487", "value": 729600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922057, "uuid": "ca14638d-8800-428d-834c-47ddb78bc776", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49b7d318-b511-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789922128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922128, "uuid": "b6753ac9-d1bd-4263-a23c-b9331778ac10", "comment": "Malware payload (Mirai)", "value": "e4aa2ca2eda88fb4d6286dc71660414d", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922128, "uuid": "b6e83880-92dc-48b9-9b4c-fd2069a5377b", "comment": "Malware payload (Mirai)", "value": "5f6742ad105b8eb2817d950fce6c833df229b33ae5e82649ccb41bba067d60ad", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922128, "uuid": "09d9c372-48f5-4c3d-a6d9-84b81f63457a", "value": "T114F47D02FB085543D9531DB39DBB07EDC324911204F6E3193B0E6B2E1692A7E9ADB3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922128, "uuid": "e2b06c44-a616-4e8a-82a1-d7f0017b8580", "value": "12288:GfCQY7Yq793+0IiKvlR64L6tjXvsinIDCBr0NXK5O1kuEuQ:G66vF8BJ5mkua", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789922128, "uuid": "46cfcd44-5fad-489d-8661-482acb186b51", "value": 727640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922128, "uuid": "655d5166-bb8f-4fe6-95ee-b5d1f33f74e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8886dbb8-b511-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789922233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922233, "uuid": "2197a519-29c0-4b56-9524-ad041ab5fb6b", "comment": "Malware payload (Mirai)", "value": "e4ff674b49a6ea656858470873983a85", "object_relation": "md5", "Tag": [ { "name": "ActiveMQ", "colour": "#32cef5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922233, "uuid": "2f368134-e462-4244-86de-4f97ae6d4141", "comment": "Malware payload (Mirai)", "value": "c2af8f6db2b945f4719e21a9322f5fac0c83f741b7fc41ee4bc1a00e5fc7eb1c", "object_relation": "sha256", "Tag": [ { "name": "ActiveMQ", "colour": "#32cef5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922233, "uuid": "6eed1327-dc0c-4057-8af2-fa3712a8127d", "value": "T14251FCC712915532ECB6BA23FDBECE1C7181509228E63F0E99DC34E596CCD88B059B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922233, "uuid": "e711db48-b322-49fc-acbe-ce4788b29af5", "value": "48:ip6q6hmlp6g6nElp6x6CXlp616ePlp6a06azvZlp6aW6aFvjlp69NO69z4gelp6E:iqmluEleXlGPll2zvZllwFvjlGxz4Zl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789922233, "uuid": "6c6c7a3c-461f-4a19-be6d-875e70f9fe7d", "value": 2989, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922233, "uuid": "dee01ffe-dc2c-4064-aaa1-0a51fc0297c9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af558983-b515-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789924016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789924016, "uuid": "99942f0f-8704-4397-a358-74719b776927", "comment": "Malware payload (Mirai)", "value": "5efb39f02aad38c84ff67b18de4c25c7", "object_relation": "md5", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789924016, "uuid": "177a725d-9771-463f-b96b-cccbadde68b6", "comment": "Malware payload (Mirai)", "value": "21e45d4c68354ba4e6ae0f61202ff648b45453e9e1d9ab65fedf2dd7c516b3e3", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-161", "colour": "#7cf3ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789924016, "uuid": "febcb76c-01ed-42bd-b99e-3f63a75b9ece", "value": "T1FCF46B16AF540FEBC8AFCE34412E8347169D9ADB46D1A33460BCCD48BA4D25A4EF35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789924016, "uuid": "0c12085f-33f6-4823-9629-dc0473065099", "value": "12288:cEVjP7xAqAfiYhPvDIN5WXfFOV7+yVQeMcA97WbYDkg1i0E/yKyrlOD1lkga26Rm:Yl4uHsf5LqG4xIL+nPBsl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789924016, "uuid": "1d7e7124-1243-4de9-a309-c81c9d795c97", "value": 731340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789924016, "uuid": "9e76c104-588c-4cad-a884-cb0f695c4f4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36df674e-b519-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789925532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789925532, "uuid": "5ff96d79-e3b4-4655-a44b-abb8b201b9e7", "comment": "Malware payload", "value": "1fad74adb8fd162132ceb2f4d41a0f0f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789925532, "uuid": "669d6e04-2ee0-47af-8054-dda3852e3c7b", "comment": "Malware payload", "value": "e36356187243a195133928e22639d389d9fe25a89d4a696fc2f3c903e5a2ae5b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789925532, "uuid": "aa20a93f-fc5a-42db-a091-78b877ac5629", "value": "T19263F9737886142A310F028F6117733CB5BA99D6DA01D9F1F6F661285BB4FA136F32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789925532, "uuid": "1e7c8675-b01b-4d42-9fc2-4fcc1ef2a48a", "value": "1536:uFypRUThfsjMpxD3tKAD2dDeLSJbnZqa2PW/:uA4NEjMp9tP4eLSJbZqHPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789925532, "uuid": "de8365da-16b0-4704-aa9e-e6a8e98f66c3", "value": 71235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789925532, "uuid": "4bf426bf-2774-4516-b477-855be31de50d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e967ba50-b519-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1789925831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789925831, "uuid": "9f74d259-a03a-4842-99b0-b293eecc3617", "comment": "Malware payload (Mirai)", "value": "e6ebd797f17b12fab1ee379041ae889a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789925831, "uuid": "356cf4de-d4a0-4ff6-8ec7-2071ebbbcf63", "comment": "Malware payload (Mirai)", "value": "4aca18200e41c23dd646129603b990de52c51ddbbf6a558aed0aba3996168f2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789925831, "uuid": "18128ea8-53f0-4bca-8c18-36324ef1aaa5", "value": "T118F2E174C5AD8FD3EDA98EB02FD153DABBEC1E4B1751CCD331028F519B018058A9AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789925831, "uuid": "afb6f5cd-56e4-4687-8ae6-420d966c617a", "value": "768:seDRJ7WcwHDB40LYBm1A/PWyi7yWr/iu2vHM9+Vz4uVcqgw09g:sCRocD0Lu/PWUWr/iuN9wz4u+qgw09g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789925831, "uuid": "e34f966b-f605-429c-99a4-0a5a9e160680", "value": 35140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789925831, "uuid": "b932ace5-ae67-41fe-9325-f06b4573f212", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8c95857-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1789931291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789931291, "uuid": "7b7dbb53-a39c-4ddf-96d1-dba047511970", "comment": "Malware payload", "value": "bc6e7a9f1c26caacde39642459e56f9f", "object_relation": "md5", "Tag": [ { "name": "bokbot", "colour": "#d4f381", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#c6088f", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#f37137", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789931291, "uuid": "c84fc9ef-8148-443a-8d73-ac065e2c2b7d", "comment": "Malware payload", "value": "0fea82f8fc3080d40ec9fd86a161f5011cd2f3efad982495866fa06d3299368a", "object_relation": "sha256", "Tag": [ { "name": "bokbot", "colour": "#d4f381", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#c6088f", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#f37137", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789931291, "uuid": "1daace40-eef0-41ae-a497-933258b82343", "value": "T19522D5276200302B70678D8A39E37F0D631AC05BA10754BAED995E58C5CCA235E7EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789931291, "uuid": "1a4e9dd7-a5d3-4917-b863-c760ca654b7a", "value": "192:M79Rg2W3ZoxKSL6+fS2mMlGU/vm5ld6WiA1grzrmiPzH7dowiTGPQIagWCZ9/l6:M7s2W3ZyoNlbJiPzH5owIGPQhgWCjc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789931291, "uuid": "2eb25cfd-d086-40b4-9cd9-ac1a17f695f0", "value": 10881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789931291, "uuid": "73c7cb93-a5d1-4cb9-aa42-eba832fd46eb", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47bd221f-b52f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1789935009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789935009, "uuid": "26d9077e-01a0-400f-a8eb-d2c3252b7a88", "comment": "Malware payload", "value": "16aeb06fbd0961fbf81b926cc69fafa2", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789935009, "uuid": "7c69171a-02d4-4417-b075-ea5949e92520", "comment": "Malware payload", "value": "2264e7a0af228448eaac23e953ec0a447d94ae1bdb1edcc985e4063506769523", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789935009, "uuid": "f8c356a3-8b73-4915-97b3-ddf88bd1f3ae", "value": "T15B8602A7FD8AC929D95784F351C2C152642A01D9E80BD23F26A08D87F973D4B035AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789935009, "uuid": "72487106-1415-4e80-aaf8-670b45a71460", "value": "98304:J9felTtKWY2POQ5THfu9nR83aNsKaYOwICbPq4pbuD/HngzFuhaJUPMlXaa82w4u:ktQ27f8W3aHaYOoyKqUfUUcaw4YAfRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789935009, "uuid": "3e4cc721-7c5f-4da5-a091-633c1d3906d7", "value": 8064467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789935009, "uuid": "5ed80a43-7651-4e4e-a676-27d60b519cd7", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72887789-e514-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1789944458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789944458, "uuid": "16ddcd73-9d97-46a8-aa2a-446f1e837594", "comment": "Malware payload (CoinMiner)", "value": "cbcb58ffe45c202c11bcf2070496aed6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789944458, "uuid": "8b428735-4d52-48eb-a0a5-f8444ebe97e6", "comment": "Malware payload (CoinMiner)", "value": "7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789944458, "uuid": "aa797b9e-79b8-4728-a309-b6f68bab9031", "value": "T19DF53329C35BA51C444ED111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789944458, "uuid": "fbf8c550-e1d0-4095-9956-533182c12dbb", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1lu/:SyrPO3UDsdXp+z8+FWyE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789944458, "uuid": "900aca02-37ba-4f65-ac2f-9be210aadf16", "value": 3528005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789944458, "uuid": "7f721937-95d8-4e90-bcc4-0d3e2c2a6ddd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebbe57bd-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1789946945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1789946945, "uuid": "b7a664e7-de5e-45a5-8b84-b7f11b76cfbd", "comment": "Malware payload (CoinMiner)", "value": "a9d4007c9419a6e8d55805b8f8f52de0", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1789946945, "uuid": "a791c7a7-59c1-4f7f-a199-e61d67ece781", "comment": "Malware payload (CoinMiner)", "value": "5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1789946945, "uuid": "77349d46-1e8f-4c41-88ad-309056d15609", "value": "T13F563355F0405826F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1789946945, "uuid": "1cc0bc53-1bd1-4b31-8390-7461d26d63c5", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1789946945, "uuid": "85c3d515-7f77-49d8-9768-3ceac62d5cd3", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+jb5jC3ajz4F4VRc:HBfTCiUswVSLOJgyBGv5jGQW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1789946945, "uuid": "dc79dfb6-0048-483d-a70a-00511af86a00", "value": 6271268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1789946945, "uuid": "9e41ece1-2cdb-4f19-a3fa-2113afe17c4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863566, "uuid": "f083f04d-b488-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.183.78:34893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863567, "uuid": "f1249568-b488-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.105:37937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863568, "uuid": "f1bbc9b9-b488-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.101.169:50352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789863858, "uuid": "9e3c1599-b489-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.186.200:52819/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789865240, "uuid": "d60122b7-b48c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.105:37937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789865353, "uuid": "19b1f2f6-b48d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.186.200:52819/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789866635, "uuid": "159134fe-b490-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.101.169:50352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789866870, "uuid": "a18483e2-b490-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.75.123:47564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789867887, "uuid": "fff0c1c0-b492-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.222.235:42257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789868487, "uuid": "65661582-b494-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.161.206:47210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789868722, "uuid": "f1506c19-b494-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.236.217:39063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789869148, "uuid": "ef78280f-b495-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.40.241.29:60841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789869316, "uuid": "53453819-b496-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.131:34378/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789869758, "uuid": "5b144b45-b497-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.76.33:40755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789870575, "uuid": "41f5812d-b499-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.131:34378/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789870577, "uuid": "4351d38c-b499-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.236.217:39063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789871728, "uuid": "f14ec745-b49b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.76.33:40755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789871963, "uuid": "7d3620df-b49c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.20:57154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789872031, "uuid": "a5ba5545-b49c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.151.11:55414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789872325, "uuid": "5550e099-b49d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.217.79:41208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789872393, "uuid": "7db6263d-b49d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:42226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789873410, "uuid": "db84fd65-b49f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.62.73:33915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789874241, "uuid": "cacc2147-b4a1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:42226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876173, "uuid": "4ab153a3-b4a6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.205.23.106:40539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789876834, "uuid": "d488a7d8-b4a7-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.105.163:39609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877593, "uuid": "9902adb5-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.99.48:53745/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "edd4c038-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "edd4c3b0-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877735, "uuid": "edd4d60c-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee50118d-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee5062ea-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee50d3fc-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee5397ab-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee53c357-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee53dc44-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee53e833-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee53e9a7-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee5401b4-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee646286-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee66acd8-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee66cd3f-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee707a93-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee707e9f-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee708e2f-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee844e98-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.206/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877736, "uuid": "ee845f9e-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.206/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eea81c88-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eeb0dee4-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eeb0df19-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eeb0e3e9-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eeb0ecef-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eeb114d8-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877737, "uuid": "eece6042-b4a9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877785, "uuid": "0b9445a5-b4aa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877841, "uuid": "2ce06fb0-b4aa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789877841, "uuid": "2ce08c14-b4aa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878266, "uuid": "2a71e62f-b4ab-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.105.163:39609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878555, "uuid": "d6b735e2-b4ab-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.140.223:35556/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789878623, "uuid": "ff264d1c-b4ab-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.132.51:55956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879769, "uuid": "a9fc1a9d-b4ae-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.42:36502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879831, "uuid": "cf2b3420-b4ae-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.28.79:33685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789879835, "uuid": "d178b13a-b4ae-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.137.62.72:4039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789880794, "uuid": "0d38dd89-b4b1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.91.183:47370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789881627, "uuid": "fd6c1934-b4b2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.137.62.72:4039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882328, "uuid": "9f730f53-b4b4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://genovaw.com/dynamic?txd=001e07c934e19b9d10f621c6b7546b43b2fb1c7b8fce2625fc7b767dfb626336", "Tag": [ { "name": "Amos", "colour": "#7aa510", "exportable": true, "hide_tag": false }, { "name": "AppleScript", "colour": "#c89a93", "exportable": true, "hide_tag": false }, { "name": "applescript-stage3", "colour": "#a425c5", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "MacSync", "colour": "#d9a623", "exportable": true, "hide_tag": false }, { "name": "osascript", "colour": "#b889da", "exportable": true, "hide_tag": false }, { "name": "safeguard-build", "colour": "#779542", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "token-001e07c9", "colour": "#04a570", "exportable": true, "hide_tag": false }, { "name": "ua-gated", "colour": "#d92943", "exportable": true, "hide_tag": false }, { "name": "UnstoppableDomains", "colour": "#0b0b49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882328, "uuid": "9f80708b-b4b4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_910c239586ba4cd8.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882328, "uuid": "9f82b521-b4b4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_7fbcdf1dd0742ab7.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882330, "uuid": "a0548d76-b4b4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://forgewillow.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/kis/update", "Tag": [ { "name": "Amos", "colour": "#7aa510", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "Foxveil", "colour": "#645082", "exportable": true, "hide_tag": false }, { "name": "Mach-O", "colour": "#2d1bb0", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882331, "uuid": "a11faffc-b4b4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://the.earth.li/~sgtatham/putty/0.85/w64/putty.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789882332, "uuid": "a16b20f6-b4b4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.198.224.184/ssh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789884507, "uuid": "b20b2aef-b4b9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.64.226.151:3588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789885045, "uuid": "f2c26ed7-b4ba-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.172.16:39046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789885762, "uuid": "9e2ff1ba-b4bc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.35.190:58705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789886664, "uuid": "b7caa0c7-b4be-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.172.16:39046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789887266, "uuid": "1e78f636-b4c0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.116.218:54866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789887383, "uuid": "6469e086-b4c0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.49.213.85:56484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789888576, "uuid": "2b65ae65-b4c3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.99.175:43353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789889235, "uuid": "b46f287b-b4c4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.237:37312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789889486, "uuid": "4a0d8b18-b4c5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.49.213.85:56484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789889665, "uuid": "b4371c81-b4c5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.240.51:57371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789890326, "uuid": "3e375be6-b4c7-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:51972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789890685, "uuid": "142d661b-b4c8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.116.218:54866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789891459, "uuid": "e19f74eb-b4c9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.99.232:45001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789892066, "uuid": "4b583fd8-b4cb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:51972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789894229, "uuid": "54fc477d-b4d0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.105.104:47417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789895621, "uuid": "929539da-b4d3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.138.112:36995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789896443, "uuid": "7c9e83f1-b4d5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.71.22.225:40061/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789896864, "uuid": "777ff519-b4d6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.237:37312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897465, "uuid": "ddda851b-b4d7-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.255.193.216:43347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897587, "uuid": "2667af87-b4d8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.89.37.70:53361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789897633, "uuid": "41a1aca9-b4d8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_f44df060f8ce40c6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898304, "uuid": "d18e3f44-b4d9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.39.148:34102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898413, "uuid": "129243b3-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.118:50966/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898416, "uuid": "14495f05-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.166.165.60:54889/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898416, "uuid": "146d64bf-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:51077/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898416, "uuid": "146d6c09-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.166.165.60:54889/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898416, "uuid": "148ed7e4-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.221:34215/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898417, "uuid": "14e536a1-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.207:49650/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898419, "uuid": "164b9e83-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.111.130.108:34417/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898420, "uuid": "16cccfb0-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.161.214:52244/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898421, "uuid": "17834075-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.196.41.11:57417/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898421, "uuid": "1783736b-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.224.37:52333/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898436, "uuid": "205df13b-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.177.85:59031/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898470, "uuid": "34cce8e1-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.106.83.171/bins/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898473, "uuid": "36a5104f-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.27:41297/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898475, "uuid": "37e49044-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.219.201.2:42660/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898477, "uuid": "38fa1171-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.191.161:45178/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39305e97-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.122.142:56151/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "395beaf3-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.42.250:35356/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "395c282b-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.225.33:55172/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39814ea3-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.236.231:34448/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "398172c6-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.0.101:51078/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "3994b97f-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.198.224.184/bb", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39a0ba84-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.154.21:43710/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39a0dd5a-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.44.146.11:58330/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39a979b6-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.32.104:37770/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39a9c3f3-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.207:49650/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39a9e988-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.220.149:55031/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898478, "uuid": "39ba3b56-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.13.214:47541/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c11784-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:34985/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c12d3c-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.124.23:51014/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c324d6-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.154.21:43710/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c75e3e-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.253.118:39679/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c75e31-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.46.114:55805/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c76ab4-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.253.118:39679/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c793df-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.245.39.42:55915/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39c8c140-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.13.102:40537/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39dd2524-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.137.112:39196/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "39fc8c43-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.172.64:59076/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "3a109cfc-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.172.64:59076/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "3a51c6f1-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.28.209:54365/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898479, "uuid": "3a546f04-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.230.128:38478/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898480, "uuid": "3a6cc893-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.28.209:54365/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898480, "uuid": "3a6eede8-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.33.88:47676/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898480, "uuid": "3a811c00-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.160:56865/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898480, "uuid": "3ae8d58d-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.27:41297/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898481, "uuid": "3af773b8-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.13.102:40537/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898484, "uuid": "3d075752-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.243.69:54414/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898485, "uuid": "3db9f4fa-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.216.199.241:34377/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898486, "uuid": "3e41843f-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.112:43932/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898486, "uuid": "3e6cc5c3-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.143:57049/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898487, "uuid": "3e8d105a-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.128.122:56479/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898487, "uuid": "3ecc234d-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.15.92.109:41040/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898487, "uuid": "3ee30914-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.191.161:45178/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898487, "uuid": "3ef419da-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.181:46716/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898487, "uuid": "3f187a60-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.172.218.181:43568/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898487, "uuid": "3f1ab800-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.186:38333/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f204775-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.143:57049/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f37d2b8-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.221:58071/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f4c5c52-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.15.14.11:33213/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f4c6c3c-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.13.214:47541/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f4c9fec-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:39869/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f4cc189-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.223.88:50085/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f4cc8e1-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.124.23:51014/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f69fcd6-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.3:33646/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f78542c-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.138.112:36995/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f9f170c-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.123.140:41437/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3f9f4352-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.41.168:50927/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3fa1bba4-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.246.176:51494/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3fa70ba9-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.80.145:45473/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898488, "uuid": "3fa766d3-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.46.114:55805/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898489, "uuid": "3fc61e0f-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.37.137:41068/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898489, "uuid": "4010dbe9-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.100.141:59476/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898490, "uuid": "406b06a8-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.49.114:45828/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898490, "uuid": "406b6313-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.174.127.164:57968/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898490, "uuid": "40771710-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.200:33778/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898490, "uuid": "40d0ac0d-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.100.141:59476/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898491, "uuid": "40e95815-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.128.122:56479/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898491, "uuid": "4158f20a-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.216.199.241:34377/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898491, "uuid": "417aa5dd-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.230.128:38478/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "41a0ce71-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.225.33:55172/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "41a11ff4-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.181:46716/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "41a12154-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.137.112:39196/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "41a1234a-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.50.251:55920/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "41a817db-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.24.40.180:50081/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "41c5f588-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.150.168:38357/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "4202bdac-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.186:38333/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898492, "uuid": "420a9db0-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.202.163:60965/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898493, "uuid": "423107fd-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.193.120:43235/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898493, "uuid": "42312084-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.202.163:60965/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898494, "uuid": "42dc6818-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.219:49758/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898495, "uuid": "43918090-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.219:49758/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898496, "uuid": "442e94d8-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.123:49283/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898498, "uuid": "4544eb80-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.64.213:55540/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898499, "uuid": "45c372bf-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.64.213:55540/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898500, "uuid": "46dae10f-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.174.127.164:57968/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789898602, "uuid": "838a5fb2-b4da-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.231:55283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789899744, "uuid": "2c330fdf-b4dd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.89.37.70:53361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789901247, "uuid": "ac1ad2f5-b4e0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.157.16:40173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789901305, "uuid": "ce4261df-b4e0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.41.168:50927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789901848, "uuid": "12676af7-b4e2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.55.246:45541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789901897, "uuid": "2f7bac36-b4e2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_947499ad823f1270.exe", "Tag": [ { "name": "9d2ca3", "colour": "#472c25", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902983, "uuid": "b6d6b94f-b4e4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.206/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902985, "uuid": "b7995e59-b4e4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789902985, "uuid": "b7be854a-b4e4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903048, "uuid": "dd351dc3-b4e4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903048, "uuid": "dd3521d1-b4e4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.63/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903280, "uuid": "67b868f8-b4e5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.157.16:40173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903340, "uuid": "8b993340-b4e5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.151.11:55414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789903584, "uuid": "1cf54a94-b4e6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.55.246:45541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789904786, "uuid": "e979a451-b4e8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.42.250:35356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789904847, "uuid": "0d8e43da-b4e9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.64.157.52:54375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789905371, "uuid": "46232100-b4ea-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.10.111:46701/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789905865, "uuid": "6c58fd33-b4eb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.45.235:56991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789906337, "uuid": "8598db78-b4ec-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.64.157.52:54375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789906707, "uuid": "624cb245-b4ed-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.7.153:58478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789907178, "uuid": "7b41f276-b4ee-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.240.176:56878/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789907233, "uuid": "9bc06b16-b4ee-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.21:59565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789907534, "uuid": "4f4ac372-b4ef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.103.176:51069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789907535, "uuid": "501e26a5-b4ef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.45.235:56991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789908871, "uuid": "6c3aad3e-b4f2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.21:59565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789909528, "uuid": "f3ac8dac-b4f3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.72:38307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789910010, "uuid": "133fcd20-b4f5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.247:59883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789910312, "uuid": "c72992a9-b4f5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.64:57634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789910775, "uuid": "dad51f0e-b4f6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.10.111:46701/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789911685, "uuid": "f92feddf-b4f8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.247:59883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789911861, "uuid": "62186b06-b4f9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.72:38307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789913907, "uuid": "258f040a-b4fe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.44.145.119:59517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789914099, "uuid": "988413e5-b4fe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.132.225:57134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915991, "uuid": "fffbd6bd-b502-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_4b1a3121a1c2313a.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915993, "uuid": "012492d0-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.217.233.97/go.sh", "Tag": [ { "name": "redis", "colour": "#9f5491", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915993, "uuid": "012779aa-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.247.108.225/release/x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915993, "uuid": "01672866-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://taunahi.client.farm/downloads/TaunahiAutoPatch-b7-fabric.jar", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "hypixel", "colour": "#7f5869", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "025e2e2a-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.247.108.225/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "025e5fa4-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.247.108.225/release/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "027e1f5a-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.106.83.171/bins/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "027e4189-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://Cn.devglobal.biz/bins.sh", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "027e4426-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.106.83.171/bins/dbg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "027e48e1-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.106.83.171/bins/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915995, "uuid": "02a0803a-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://prestigeclient.st/PrestigeLoader-26.2.jar", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915996, "uuid": "02b9dcc0-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsecmod.st/Opsec-Mod-Fabric-26.2.jar", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915996, "uuid": "02b9e18a-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://zhostz.com/work/invitation_viewer.vbs", "Tag": [ { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789915996, "uuid": "02d06374-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://prestigeclient.st/PrestigeLoader-1.21.11-v1.5.5.jar", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916004, "uuid": "07c0f5e0-b503-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.113.233.133:60943/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916894, "uuid": "1a2ffd54-b505-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.106.83.171/bins/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916894, "uuid": "1a8738c8-b505-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.106.83.171/bins/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916897, "uuid": "1c2afb96-b505-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://skymoders.top/taunahi/TaunahiAutoPatch-b6-fabric.jar", "Tag": [ { "name": ".jar malware", "colour": "#2226bd", "exportable": true, "hide_tag": false }, { "name": "hypixel", "colour": "#7f5869", "exportable": true, "hide_tag": false }, { "name": "minecraft", "colour": "#b75d0e", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "trv", "colour": "#5ace9f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916906, "uuid": "2130b70b-b505-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.178.140:58897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789916906, "uuid": "213bb155-b505-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.178.140:58897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789917878, "uuid": "64ad8336-b507-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.147.241:47690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789917985, "uuid": "a44a05d1-b507-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.117.73:41846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789918032, "uuid": "c0415a53-b507-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.212.61:45094/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789918104, "uuid": "eb6bbc9e-b507-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.9.67:57224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789919063, "uuid": "27583a5a-b50a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.49.141:60075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789919122, "uuid": "4a0d8e34-b50a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.117.73:41846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789919664, "uuid": "8d26d3cd-b50b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.147.241:47690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789919790, "uuid": "d8ae61e8-b50b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.9.67:57224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789920447, "uuid": "5fe6bf12-b50d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.49.141:60075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921100, "uuid": "e54da1ea-b50e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.111.100:40959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789921756, "uuid": "6c48bb59-b510-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:37162/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922232, "uuid": "87d419cd-b511-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.217.233.97:8080/run.sh", "Tag": [ { "name": "redis", "colour": "#9f5491", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922232, "uuid": "87d41f34-b511-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.217.233.97:8081/run.sh", "Tag": [ { "name": "redis", "colour": "#9f5491", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922233, "uuid": "88d424a3-b511-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.206/1.sh", "Tag": [ { "name": "ActiveMQ", "colour": "#32cef5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922235, "uuid": "89e90039-b511-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.198.224.184/nix", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922244, "uuid": "8f444f49-b511-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.82.244:51804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922491, "uuid": "2216f107-b512-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.14.210:59116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789922728, "uuid": "af8ffe8a-b512-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.111.100:40959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789923085, "uuid": "842b9b5c-b513-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.82.244:51804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789923086, "uuid": "85170d32-b513-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:37162/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789926079, "uuid": "7ce39db7-b51a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.5:48329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789927642, "uuid": "2049a6d6-b51e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789927642, "uuid": "205157ac-b51e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.158/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789928786, "uuid": "ca72d99d-b520-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.41.45:45400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789928789, "uuid": "cc36653a-b520-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.191.0:36990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789928836, "uuid": "e866a7ec-b520-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.169.81:37674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789928890, "uuid": "085fa3e6-b521-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.140/files/7782139129/R0AQKpA.exe", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789929253, "uuid": "e0e26c74-b521-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.172.218.181:43568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789929621, "uuid": "bbf6a356-b522-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.74.167:39800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789929680, "uuid": "df3a3ef6-b522-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.31.103.204:33569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789929797, "uuid": "24eadc68-b523-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.70:36175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789931844, "uuid": "e8ed78d4-b527-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.117.53.24:52050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789932266, "uuid": "e4b9a5fc-b528-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.74.167:39800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789933289, "uuid": "46956047-b52b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.38.104:36717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789933403, "uuid": "8a17d185-b52b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.201.178.194:49349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789934184, "uuid": "5bb57e74-b52d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.55.180:47598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789934958, "uuid": "292cdc59-b52f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.201.178.194:49349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789934959, "uuid": "29b9e3b4-b52f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.42.14:50409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789935562, "uuid": "91196a16-b530-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.42.14:50409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789936105, "uuid": "d52def23-b531-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.182.123:33235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789936886, "uuid": "a632394b-b533-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.43:37860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789936937, "uuid": "c4a7d408-b533-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.235.7.1:52247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789937248, "uuid": "7e5a7c26-b534-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.67.92:58588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789937901, "uuid": "0363fdc3-b536-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.182.123:33235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789938142, "uuid": "92c7ea71-b536-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.43:37860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789938495, "uuid": "65b12481-b537-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.227.121:32852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789938806, "uuid": "1ebb76ad-b538-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.235.7.1:52247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789939279, "uuid": "38a396c9-b539-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.38.104:36717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789940427, "uuid": "e4e1636b-b53b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.232.150:44550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789941687, "uuid": "d41ebda6-b53e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.232.150:44550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789941870, "uuid": "4139e7d5-b53f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.209.245:36715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789942275, "uuid": "323e6b8b-b540-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.238.123.66:37609/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789943724, "uuid": "925598d0-b543-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.209.245:36715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789945225, "uuid": "11055386-b547-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.80.145:45473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789947449, "uuid": "3eb38848-b54c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.195:33615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1789948646, "uuid": "0819ce61-b54f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:51077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879814, "uuid": "c5064df4-b4ae-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.28.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789885749, "uuid": "9646c492-b4bc-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.35.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789919052, "uuid": "2047ffe2-b50a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.49.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789933273, "uuid": "3d044676-b52b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.38.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789869132, "uuid": "e5ee0663-b495-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.40.241.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789866855, "uuid": "98a2da94-b490-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.75.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789888570, "uuid": "27dfcc77-b4c3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.99.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789894213, "uuid": "4b6ac02e-b4d0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.105.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789901229, "uuid": "a11e48e2-b4e0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.157.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789868709, "uuid": "e9cc7e8d-b494-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.236.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789933392, "uuid": "83a07b95-b52b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.201.178.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789947434, "uuid": "35571055-b54c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.78.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789906693, "uuid": "59e9d704-b4ed-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.7.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789936090, "uuid": "cc0517c3-b531-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.182.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789928771, "uuid": "c1c25d2a-b520-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.191.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789938489, "uuid": "61fadfc2-b537-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.227.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898294, "uuid": "cb7cf8b2-b4d9-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.39.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789909992, "uuid": "0831fc42-b4f5-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.199.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789918029, "uuid": "be8d2ea8-b507-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.212.61", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ff8c7343-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.113.233.133", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789941853, "uuid": "370722d3-b53f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.209.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789917855, "uuid": "57096f19-b507-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.147.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789909512, "uuid": "ea43147b-b4f3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.127.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789937231, "uuid": "73c69503-b534-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.67.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789868469, "uuid": "5ae48440-b494-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.161.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789940413, "uuid": "dcae2617-b53b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.232.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789922472, "uuid": "16e19f50-b512-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.14.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789918090, "uuid": "e333b96d-b507-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.9.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789872014, "uuid": "9b6666fb-b49c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.151.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898592, "uuid": "7d34a352-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.111.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789879814, "uuid": "c507587e-b4ae-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.137.62.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898412, "uuid": "123a54e3-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.111.130.108", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898412, "uuid": "123a437a-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.196.41.11", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ff8c8524-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.217.233.97", "Tag": [ { "name": "redis", "colour": "#9f5491", "exportable": true, "hide_tag": false }, { "name": "shell-script", "colour": "#247e47", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898412, "uuid": "123ae1eb-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.175.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f0302e-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.154.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "3a546457-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.80.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f20614-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.28.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789928829, "uuid": "e3e3b94e-b520-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.169.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898478, "uuid": "39a0ec30-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.161.100.141", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789928771, "uuid": "c1c0b2c5-b520-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.41.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789934951, "uuid": "24d9bbf5-b52f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.42.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789885031, "uuid": "ea8dbbc5-b4ba-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.172.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33efcecb-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.190.27", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898480, "uuid": "3abc0ed7-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.123.140", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789916892, "uuid": "1948a545-b505-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.178.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f1f60e-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.33.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "3a271f77-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.37.137", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789936870, "uuid": "9d24ff4b-b533-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.183.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f0755a-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.137.112", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "39c1277d-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.101.200", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898412, "uuid": "1238fc57-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.224.37", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f0dcdc-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.230.128", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789913893, "uuid": "1d9333eb-b4fe-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.44.145.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f0476a-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.44.146.11", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "39fc76ae-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.64.213", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789869729, "uuid": "49803949-b497-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.76.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789896429, "uuid": "746a49b9-b4d5-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.71.22.225", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "39fcbd22-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.41.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f6079a-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.144.112", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898478, "uuid": "3994bc56-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.146.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863854, "uuid": "9bd6e514-b489-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.186.200", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f15c39-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.243.69", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789876816, "uuid": "c9bd4a7b-b4a7-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.105.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f3c316-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.236.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789880770, "uuid": "feeda81e-b4b0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.91.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898481, "uuid": "3af671cd-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.202.163", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789863552, "uuid": "e7d4d03c-b488-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.101.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789878552, "uuid": "d48dd21d-b4ab-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.140.223", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789901832, "uuid": "08b2597f-b4e2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.55.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f1e81e-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.42.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789907175, "uuid": "792a6592-b4ee-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.240.176", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789895592, "uuid": "81846558-b4d3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.243.138.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789917971, "uuid": "9c7338a0-b507-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.117.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f0612d-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.13.214", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898480, "uuid": "3a818df8-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.246.176", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f30bd5-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.128.122", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789873394, "uuid": "d2177bc9-b49f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.62.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789877711, "uuid": "df7d46bf-b4a9-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.193.63", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882328, "uuid": "9f37563c-b4b4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.198.224.184", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ff8c2963-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.247.108.225", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789904829, "uuid": "02f98c00-b4e9-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.64.157.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789884491, "uuid": "a87cbd6c-b4b9-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.64.226.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f419f2-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.122.142", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f58b18-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.150.168", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "3a272b41-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.123", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f1c28a-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33f3eb66-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.16.172.64", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898483, "uuid": "3c754f14-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.193.120", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898479, "uuid": "39e65e8c-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.219", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789914073, "uuid": "888a3dda-b4fe-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.132.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789898469, "uuid": "33efa478-b4da-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.174.127.164", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1789887251, "uuid": "1579e8b8-b4c0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.116.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ffa0f377-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "Cn.devglobal.biz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789882328, "uuid": "9f7a3e97-b4b4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "forgewillow.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ffa84045-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsecmod.st" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ffabfcb8-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "prestigeclient.st" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915991, "uuid": "ffce16ce-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "skymoders.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ff9f7a79-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "taunahi.client.farm" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1789915990, "uuid": "ffa91b74-b502-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "zhostz.com" } ] } }