{ "Event": { "published": true, "date": "2026-03-26", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-26", "timestamp": 1774570518, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "97715c53-d118-43a5-933f-7d7284a3ee8f", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774483819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483819, "uuid": "47a2452d-304e-4f9e-8d82-fb6527c35e8a", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483819, "uuid": "4c1c1ff8-8664-4bc6-9bd2-a94c3309d974", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483819, "uuid": "8ebcea3c-68be-4033-9b39-2a500ea80eac", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483819, "uuid": "63e4245f-be48-49ba-87f3-69f973e5f11b", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774483819, "uuid": "17122be1-a027-4526-a7a3-89dad690379f", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3032c0cc-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774483825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483825, "uuid": "0fdcc78b-eacb-415d-857a-ed4819eaa2f1", "comment": "Malware payload (Mirai)", "value": "e3b403e6a14a05465b141d207234ee11", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483825, "uuid": "b4417841-68be-4558-bc7b-cf6c43a0e488", "comment": "Malware payload (Mirai)", "value": "8f4bfcc12f452b7af647c24999159adf3e87aa19c692dd33c8194a92af14cfdd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483825, "uuid": "7bccd983-4d86-49cf-b075-c64f6e1adf62", "value": "T18EF2F9A2B7B96B27C0E0633951F2671335AA2BD404B0C34FBC540D6E6FD2390A567A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483825, "uuid": "f7c75c3d-0137-4fef-bdd7-c61c93657e5f", "value": "768:BBOWqg6CkDgjdhJc7gRUhbZz9MUxxsH4TwMIZnIX:BBOw6CkDgjjJc7bLx/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774483825, "uuid": "4979d40c-f71c-4b42-9ba1-bd8d08352f78", "value": 35592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483825, "uuid": "0750ed5a-47e4-405f-855b-9b5cc9433be4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1774484475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484475, "uuid": "667f5b2a-8c7c-4fa0-825a-56a040226bc9", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484475, "uuid": "a7d46ce4-3e71-4be1-90ee-d69073286e7b", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774484475, "uuid": "86772183-ab0f-45b6-a701-776604af4536", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774484475, "uuid": "6b984abe-01ed-4aec-83f2-4ddcc4b36086", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774484475, "uuid": "abe96bfc-c152-4daa-ac69-df4f5ed8a869", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1774485556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485556, "uuid": "89299d7d-76f9-4d76-b706-6444d7dc6d3b", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485556, "uuid": "24eb66a6-0c6a-4092-85dc-d0e7dbb9a710", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485556, "uuid": "4e32154c-2c79-4dc9-9c73-e3fd089f2d8b", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485556, "uuid": "1c6db03f-ce57-4247-b2d8-9d97cfdd6a8c", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774485556, "uuid": "a68554a1-b68f-4278-a542-7288de0227ec", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ffb5ddd-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774485730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485730, "uuid": "946ca731-e877-4800-b204-ecfd2f4df8e6", "comment": "Malware payload", "value": "a886c710047dee39199ff71c5b60ac5d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485730, "uuid": "8920358f-bc53-4156-9fab-aeac66b01e33", "comment": "Malware payload", "value": "6aa919de55ae969183350533fed88642e1ccff428a63ae6664c5ea4b4cf9204a", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485730, "uuid": "ca209a9e-5364-42dd-ad49-c30650dc2ba6", "value": "T13CE623EA94D962E4D9D34B80624F5BCE32C0B10E55BD6D2C36CB1C429E36DAB064ED", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485730, "uuid": "7467e526-5288-4f4b-b757-f2aab736db08", "value": "b8ce7f442c8e09c8162a6b53f2118ad8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485730, "uuid": "52c44bd7-8ced-4420-9809-b3a2125a18bf", "value": "196608:Kkv0zBw+VkmyPby0PPPI49OoYub5M5xZv3BL3Prw9Xt7iFT3s6l60G8t2xGs0cU+:KkclwmJynPnIdHVZJL852xl60i/DfV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774485730, "uuid": "d28e9fad-ee75-4ccd-90e1-719ce4991376", "value": 14306752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485730, "uuid": "11701851-5ec7-42cd-80fb-082524683492", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6ad7b58-28af-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774487525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487525, "uuid": "95cac0f1-0961-42f8-bf20-c1fa3dd09ac6", "comment": "Malware payload (ACRStealer)", "value": "e48fe348d9a47f4bd473797f65c3d3d3", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487525, "uuid": "7be943ba-f0d8-4758-9a79-02cb54843ba7", "comment": "Malware payload (ACRStealer)", "value": "eb917f8a01852883ebdabb97523694242bdd0d557f47abb8d916905ec8c125f7", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487525, "uuid": "0e705a3a-3ba2-4962-9ab2-11c63a9009f1", "value": "T1BF16C80A9C501690C3BCF030DAAB592977797C546F2007E73B45B320AEB37E9A9767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487525, "uuid": "8a411268-9bdf-4e62-b15a-9b1071d11471", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487525, "uuid": "74f8d942-9431-4eb8-b41e-43083e4b8327", "value": "49152:a2sWBbM3RPPjccwOXp+PhOnYSjvQccidY:a28YDhBw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774487525, "uuid": "b70bee96-3686-443d-80bc-c33aadf21705", "value": 4132864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487525, "uuid": "2bcb4207-29c3-4ff7-971f-ddbfd525d076", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9efe6d1-28b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774488780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774488780, "uuid": "089bc098-ddb5-4ec7-bbd7-ba0df9988bd8", "comment": "Malware payload", "value": "fc3387fe006ae2579cde7b5aa3c739f2", "object_relation": "md5", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774488780, "uuid": "9a594f49-bb5d-4dec-9d8f-4f91d86e03d1", "comment": "Malware payload", "value": "91cf205a9dcebefc3dbcf0813908c2aa245f8225734dcc87d9e08224f5d4ec5d", "object_relation": "sha256", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774488780, "uuid": "ad1879c8-bca3-46db-b789-d4003e648e3b", "value": "T146F5238176940176E56B0635CA25B5A06B36FC101FF08A1E335AF37C6E7F390E936B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774488780, "uuid": "4f8e95d5-d4fd-4649-ad15-be6166baf541", "value": "98304:PBkFzdzZJe6Ueev0ShdIu8t8oaWLb+VCbiLDHs7WZkLneHr0Nu:PBqu10STImVwNgbULor4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774488780, "uuid": "a1907ee2-3863-412e-8563-2a83a353de3d", "value": 3346432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774488780, "uuid": "16e1088c-f6d5-453c-987e-c5b353229c2d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4edf3d22-28b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774489030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489030, "uuid": "69c12d31-bb49-4b82-ae60-3e6031b8a844", "comment": "Malware payload (Mirai)", "value": "c1bcefdbfbf312726c76a9d3c829b0a5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489030, "uuid": "e343b6ab-4404-4453-bd6e-f2aa0a991c15", "comment": "Malware payload (Mirai)", "value": "087d8ad89e86a067625085c072653ed9b1501818a1da6e2e15c12f9ad2353be2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489030, "uuid": "39ededfa-8672-4b35-817f-16fc967442f5", "value": "T19BD33A17B88080FDC8E9D1784BFEA136DA32B46D1238711B27D9B9326E5DE301F6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489030, "uuid": "5b278125-dde3-48b7-b4f7-dd459b394686", "value": "1536:ol9NevV9cQNjniMYE/xOvZzpE6KqjBBdqehWk5SQTrI+S0f+/Vjn3Lqr:oXNgHdni2x2TnBXNhWk50+S0WNj3Lqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774489030, "uuid": "01602cf6-cbe9-4419-8856-37bba75d9cae", "value": 134936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489030, "uuid": "c0b4cbe9-d2cb-414f-bf6b-bbea50cefd97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774489338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489338, "uuid": "0a630806-b21c-4e14-b223-8497629134ac", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489338, "uuid": "c41303dc-ade2-4cd0-ac4a-a24e78877957", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489338, "uuid": "f1784159-63f3-4a88-9330-dcd13f99bb01", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489338, "uuid": "360d70df-97d8-484d-b2c5-95f5c888229f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774489338, "uuid": "e40a78c3-d7fd-4930-84d2-fe65f7112a27", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "559cdd07-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774492048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492048, "uuid": "bfdacbc0-d756-4dd2-aad4-fcfced0f0661", "comment": "Malware payload", "value": "e41cdd1cc32dae87215eca979ceaf5f1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492048, "uuid": "2ac836cd-a745-47a4-9ea6-cf0443505f47", "comment": "Malware payload", "value": "de2864603ad32ef7e5c6d3f94f81955c3b8cfe4a8206839c4a737227e0bc936f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492048, "uuid": "bbeb5e4e-f37b-4dcb-9f47-b27c2632fb59", "value": "T1A722C018749DB301FC370452AC19B0DDFA6E126D5AE6A7CF423160864C5247BD21F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492048, "uuid": "7424e981-2d1d-4b33-a58e-c9be0f5ca39a", "value": "192:7y7XHlYAe5b8xV1yPJxmVP59ocMXMi5OF+iaEa5PCg1Q3LSE8oKOR3Gu:7y7XlYzOVgxmRYv8oA+iYPr1Q3L9Ou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774492048, "uuid": "303146c7-9c9a-4f6d-a15b-10828f38900a", "value": 9984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492048, "uuid": "7dcd028d-5f8f-448e-be2c-e08326a8c971", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90c89bae-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1774492147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492147, "uuid": "b8910b4a-b402-4932-ac3c-861bd5b38278", "comment": "Malware payload (RustyStealer)", "value": "92cefe719e88a4844263dddf01b7ab10", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492147, "uuid": "492900ba-bdf9-4b7c-8fa7-73acab8b7d92", "comment": "Malware payload (RustyStealer)", "value": "5bf94a9b23acf9041bbd9c66babee1fb117df0165bb9bbe5511981bddc3cb75a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492147, "uuid": "96ed991b-a51d-43fa-b031-c5ba57a2b4f6", "value": "T16286E18476FACE21DCF1A039E747E716FE1BB8E8665009BD7735247B0619E8CDC292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492147, "uuid": "aba60958-c646-47d4-8b00-436e6aab4baf", "value": "be2085eec435a1549df9720eb686778c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492147, "uuid": "0ac7359c-7960-4495-bd85-163684d8a81d", "value": "98304:brgqZCNxBm9+23JoTnPklluTPaQMTKY5FtfgICbV8N4M9EUD/pEPCjw2rrwPulDC:vgqgBms23JoYllpOY5j4I1N4M9HD6hV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774492147, "uuid": "07b238e9-c04c-4401-bef1-5134daadf6c2", "value": 8040301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492147, "uuid": "dd24d2fc-f635-4f4d-a84c-1073a336b082", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0ccc7b6-28bf-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774493946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493946, "uuid": "d2b86a71-85d4-4909-b9d6-9055231d9700", "comment": "Malware payload (Mirai)", "value": "9dd7884853a6173a9ea05eeaa6404122", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493946, "uuid": "e82a6559-7627-4627-8053-16f8d2ce978f", "comment": "Malware payload (Mirai)", "value": "178eeedbec23875ffdac416728a805c0539e266eb3229ca5ee4dad6a7b2755dd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774493946, "uuid": "b97d51ef-7daa-4142-938a-e1dd069b7400", "value": "T13DB35A72D8666FA8D265D0B0B0B18F792B93D9A0868B5FBE1467C3759043DCCF1493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774493946, "uuid": "a4850c49-e924-400b-9be1-efb1398a2a91", "value": "1536:2AzDUDx7QTYd0O10C5KZRAWBGcvNRMW+ksHEiBO:tDU1QT3O101ZoczMWxsHBO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774493946, "uuid": "28066863-a77f-4e9e-9040-4483c327e98b", "value": 112496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774493946, "uuid": "f4e93d7a-4437-4dae-b9e8-c0b0213c0b79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cde7318-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774494530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494530, "uuid": "35e000c7-6f7a-47f1-be2b-aa266e3fb041", "comment": "Malware payload (Mirai)", "value": "cb6ce0ef5e228734e9d8c824a44d7cbc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494530, "uuid": "56acb97c-516d-431f-b691-e4984e1f8e28", "comment": "Malware payload (Mirai)", "value": "6bda9fee00c1907521b818d7af4e053c7fea7e44d0bb13f6c970e54de7cdd1d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494530, "uuid": "e7ac88b9-401e-4074-9e06-abdbba65e3f7", "value": "T1FD835CC9E5C3D5FAF99305B261769F32CB73D27E2029EE42C3AE9835D921401D21AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494530, "uuid": "bd96e403-8d58-4a08-8b03-683d7fab132d", "value": "768:ZGM9xZsMHt6Oedb8FaPVeF8ldmVGiGefFiDZifLcMiFRyxzp0LcK8sIWckb4SB3C:5HMxpt+26GiGefFaRMlmoSxfUSvt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774494530, "uuid": "089f34e6-3d85-4c46-90a7-a3e7087102e8", "value": 85800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494530, "uuid": "736efaf4-0418-4ec7-bca1-bbc2a9a327f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2423002d-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774494542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494542, "uuid": "7ad621a1-5b3f-4a4b-b51b-16f4507d6cf6", "comment": "Malware payload (Mirai)", "value": "e71c620456b01420b8de548e0d683090", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494542, "uuid": "8866d0fa-a77e-4d7c-9e17-0f5712f415fe", "comment": "Malware payload (Mirai)", "value": "03439a4f19441041a4e6a7ca4194e89c3abdabf119f5f60e753794aa937582a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494542, "uuid": "3e5534a6-0970-4965-94a9-31e66bd50c38", "value": "T1D3E3A80A6F228F7EF269877047F38E31975977D61AE1D681E1ACE5401F202CE641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494542, "uuid": "83b8dac6-8fcf-4b52-babc-b6395c5fe0eb", "value": "3072:gA+aVXPKGq23zbUQhBmB0UYurxDEkE2/51SGu4L:gA+U/KF23zbHhBlINDvB5V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774494542, "uuid": "cac7f597-82e4-48d3-b294-8ab521fc4bae", "value": 153768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494542, "uuid": "23176753-7bb5-46b0-86eb-eb8e9df958b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa2b9f52-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774494767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494767, "uuid": "cbe0980c-742f-4143-838f-52847b428137", "comment": "Malware payload (Mirai)", "value": "389a6b67a657a04f039aacddddc5f9a7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494767, "uuid": "36351507-d1a0-443e-a5ce-55094f179dea", "comment": "Malware payload (Mirai)", "value": "007fc8df75882d255e7caf123ed8f84d13cbb12618c0d1989a9c56401d464788", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494767, "uuid": "0a1a86d7-f271-4c60-839b-0e7e3cfcb904", "value": "T1B8D39DA7B30F2461C82406F41BCB9B5D296325115D2F9AE77C6E723F2A335DB58053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494767, "uuid": "864f401a-0d22-4a19-b0df-5bfbd5620764", "value": "3072:8PC6Xo1TESqilIkdyHPQJTKUGgKCCUNMvcq:4ClESlI0DJ2UKCCUNXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774494767, "uuid": "0e72757f-31e8-4592-acb3-e2cc446bb43c", "value": 132456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494767, "uuid": "66e151ec-32e4-46e2-b962-5da7a0e346f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "861724ad-28c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774495136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495136, "uuid": "1fad3516-1e7f-4bcf-a3c1-6658a15bad00", "comment": "Malware payload (Mirai)", "value": "4c356b95c818823683be793c53692ff0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495136, "uuid": "da9da09c-fa28-4baa-9ff0-dd76c08ee597", "comment": "Malware payload (Mirai)", "value": "fad83bc0ab5b8bb25d729acd0317916a473ffab3cd7775c1595bbce1f762f190", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495136, "uuid": "bf67de1b-cba6-40f0-b06a-f2b6532907cb", "value": "T1763143BE60F96043E6DCDE0470E38DCA6705959173DA3A3ADCC12E67C4C9D447099B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495136, "uuid": "915a2677-964a-42ec-887e-77807d3e1d7a", "value": "48:sRKRGRkRWRLR3qR8Rw1lRLRg5RvRHaRoR+RsRWR3RSRARSo78RhRPqRSRqR/ReRa:Q6+4ON3agw1TNgPpqEGQOhysSbniya5P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774495136, "uuid": "3d5fe97a-0648-4229-9495-0027cc3ef2f6", "value": 1873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495136, "uuid": "28608cf1-2178-427c-b6b6-3477efa3fd24", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c743910-28c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774495173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495173, "uuid": "1ac3bd4a-248d-4d58-b5b2-22d1c34d5351", "comment": "Malware payload (Mirai)", "value": "95a3ac8d1fc04ebd604d244eaf3a0514", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495173, "uuid": "ce16fce6-8a81-4d0e-a773-91e6bd0274af", "comment": "Malware payload (Mirai)", "value": "88cb14cdadd0a11323fcfa43512918cf8b825a6976a8e5f2b72a71a4808be178", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495173, "uuid": "a7f472f7-b763-4b51-bbd4-02c9bca9bd71", "value": "T124936CC9E683E5BAFC9204B560369B364BB7E13E2136EE42C3ADD834D822541D71B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495173, "uuid": "338faeaf-e9e0-4c92-aa4d-2c8b64751426", "value": "1536:PVTEZz+96d9RuorMq4cnKIzAzSd7UPCX84co:NTE09SOort4jIMeWPCs47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774495173, "uuid": "61a577da-59de-4607-bb5d-7d9822d0913b", "value": 92200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495173, "uuid": "a545d048-0c77-49b9-b5b6-5e13569745fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fb5574b-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774495394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495394, "uuid": "62dcb2d3-0595-4bdb-b1c8-37bf76e96929", "comment": "Malware payload (Mirai)", "value": "52545c24da361541b545018327f51014", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495394, "uuid": "6e3da729-c7bd-4ac6-8c71-0a504b4bb80c", "comment": "Malware payload (Mirai)", "value": "5c88d830c55a5d9cf20e9dfec55d0b3def1037d478c44fca159512b5599c3aaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495394, "uuid": "783f9b4d-5486-45ea-8b7e-a429263f0cd8", "value": "T14CB3F952BD529F13C5C322F6F7AE428837126778D7EA3102ED247FA1278A4DB0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495394, "uuid": "279976d2-19cd-42b4-9463-d277c60c1597", "value": "3072:2QDMx2rUxKg24uIci6Y40oHG0/6ugyuVmp3vMS:BrUxKgvci540R0/6uPn3vMS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774495394, "uuid": "0593cb1c-0272-470a-b23b-9fd5447dce50", "value": 117268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495394, "uuid": "c0968f03-0839-45ac-9b50-7d8af47cae11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e75562c5-28c4-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774496158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496158, "uuid": "6eecba76-d076-4505-a325-81063948a8ac", "comment": "Malware payload", "value": "a1881a20f8a9e6144b53ca9757a5be44", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496158, "uuid": "4df6064f-8b4a-47a8-92e8-69f01d1ead99", "comment": "Malware payload", "value": "9c2233efc966d39e6d09637538ea4ddab08f64cc6dbd21a239f4d9ef0aa11466", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496158, "uuid": "f66de46b-43d2-4f03-8b37-c4e39da46441", "value": "T1E0563304649577F7E800C8FF94E73D2C5E971A9E0A2042BD75CAE029CD9B58B703EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496158, "uuid": "b042da46-36b7-4c98-80f8-2f7b44054965", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496158, "uuid": "6eae2256-0955-40eb-96b8-b56773b2aef1", "value": "196608:xt2eRVnws+KzaY1ff0u2vLlnJ79xSm/pBCPh9:xtBRVnwLk1fcVLz62pBCPh9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774496158, "uuid": "ca850281-4c68-42a0-b913-753a335ef365", "value": 6311511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496158, "uuid": "480c855e-ac92-4c43-9dc3-4215b8b0a2cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fd2feb5-28c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774496360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496360, "uuid": "d9651be7-0571-4409-bd8f-a90298980c7c", "comment": "Malware payload", "value": "0b04c034559f7d8a5b4a4a3c238b00e3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496360, "uuid": "23b3bf36-3d5f-414f-b9af-7be7ce668c56", "comment": "Malware payload", "value": "2729f63431c1d79c0f26c47cfedd5628dda8065dae1a8ded8d0761b7e6d1a765", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496360, "uuid": "31567c09-a156-4029-bcd6-43d9d4625a26", "value": "T143931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496360, "uuid": "2f1d6576-4611-446e-aeed-b4dca820ae06", "value": "1536:9Byp1tF/uwMmAIa14oXI6I1epeV7tb73WdxCrCitkb5fv2v05xDer5i3+sCZK03m:984IO0GitkbFv2v05xDer0+sCZH36Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774496360, "uuid": "573d2b21-adfa-44a6-8294-a5fddf2969b7", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496360, "uuid": "5999ed61-3ddc-4a28-af9a-e3b5c60af0b3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da60d1c5-28c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774496566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496566, "uuid": "5a5fe928-5179-4678-b9ac-5b9d2e30d5f6", "comment": "Malware payload (Mirai)", "value": "6f634ad9e84a64f502bfdc0c588027cd", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496566, "uuid": "b0620d6a-6b06-44b9-b976-51605ff178db", "comment": "Malware payload (Mirai)", "value": "b4fb9c7262d93538464cb8f92c2ae3fbc16e7dd96d92badcb87cec1aed08be05", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496566, "uuid": "252deb29-a92b-4350-b7f0-531a579c851f", "value": "T111143B13B7324FA0D725D1720BB38B565EEB01811EE298D5936CCB143A207A9689FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496566, "uuid": "eacb6a90-024b-46c2-8dc1-8cf3af99837e", "value": "3072:PdR0Z9hykiiHcwTB60i0oga+gJMk7sMjWJ5dE31Gt2UhpA:FR0XgkiKcwdJhogoJMYsMirulZUY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774496566, "uuid": "94cedddc-bbbe-4536-9dad-2e94af753f43", "value": 201280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496566, "uuid": "3fa532a5-4ade-4643-8159-240a90d8583d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08bdfb6c-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774497073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497073, "uuid": "912c4e84-95ed-495d-b570-550ae3d5fa13", "comment": "Malware payload (Mirai)", "value": "828bed67eeaf8510f174d5f24167b97b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497073, "uuid": "fec9d698-b30f-4925-9883-b02221079dcd", "comment": "Malware payload (Mirai)", "value": "04f0c5f71d4b934159b2bf2d8e13862a032a910704f5596422e5161b9181ee8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497073, "uuid": "355927fd-15c0-455b-9d08-dad90ac7aa1c", "value": "T1D1B30A52BE429F17C5C321F6B7AE46483B127B78D7EA3102ED257FA0274A4DB0E266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497073, "uuid": "cc6e3cfa-95cd-496d-bb1d-06da7ca08505", "value": "3072:kwsPCxU2sEALe96ouv6ar83111111111111111wMnAS1HgS:cPCxU2bAShuv6aQHAoAS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497073, "uuid": "79198d9b-9c56-4191-86c6-5881b6e8dccc", "value": 113172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497073, "uuid": "304758f3-a50b-4e07-87c3-6eb04d2a0df3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21fbc5bf-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774497115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497115, "uuid": "c950ff96-56fd-4be3-b64c-afa6614ee7ae", "comment": "Malware payload (Mirai)", "value": "2aafd5c5b61ced37aa2f6569b4fa7d56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497115, "uuid": "61af6136-206a-451d-b797-255dced1a241", "comment": "Malware payload (Mirai)", "value": "5ba17425e52ed385298524a49a8a12e8b69b0d28df79311f4ef20c9db7810dcd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497115, "uuid": "c3a79479-3783-42b6-b86a-ec08aa944eb8", "value": "T14FD30816BA519F12D4C331FAFB9E414933136FB8E3E97102DD206F64638A9DB0E766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497115, "uuid": "52f1b782-e348-4847-8f3b-e939a1972233", "value": "3072:f5D6CHWwqnJ3J41wAPaauOhS+BtZkzlKQHworJsPNVO:pvHWwM4VPazOhS+BtazlnQolslVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497115, "uuid": "98ce999b-0062-4b8d-bf98-202f29639b10", "value": 142076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497115, "uuid": "b0447cac-a865-4e99-8792-2b397b39d0ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "285c1ccf-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774497126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497126, "uuid": "f7f2ea49-cb35-4569-9a50-fa1b4fc50ce7", "comment": "Malware payload (Mirai)", "value": "a7872a57d28320880280a31aff8ae3d7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497126, "uuid": "afe5078b-b954-4fdf-832d-e8854fd28c65", "comment": "Malware payload (Mirai)", "value": "de849e3e399aab57b1cbc2211f00e8bf6b4d124d923b264d4f1db0208a6b72cd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497126, "uuid": "1e8ab552-0f07-4222-bc45-ffe5d7010074", "value": "T109E308C7F900DAB9F80AE73648530809B130BBA159925A377357397BED3E0E90567E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497126, "uuid": "17e88358-f7ab-4474-8474-beda916f1986", "value": "3072:rtRIhTGnXo1nahIvZ/kyd0VVjbiFLYYcNflIyNx00:QUo9aSvOydbLDyNe0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497126, "uuid": "36d4e3ad-586f-4904-bc3b-6e9697b497f1", "value": 143596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497126, "uuid": "8f918856-8d81-4555-b754-6b8f52a7ec67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e390a68-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774497324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497324, "uuid": "1b73a2d7-7d45-4fdf-aaa2-e2c5456ba7de", "comment": "Malware payload (Mirai)", "value": "b2de262c412f9760abd087c81d4372de", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497324, "uuid": "85b63e15-5ce7-4b3b-be74-9806e1a94f79", "comment": "Malware payload (Mirai)", "value": "5a83adf90314fe027cd27bc32e0194af72604fa5f055d2b627c31fc0a2fc3c6c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497324, "uuid": "1b23099e-cca3-4bb4-9b4d-3d195069ddd7", "value": "T167C33B49F8509B17C6C216BBFB4D428D7B2617E8E2EE72039D256F21378B55B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497324, "uuid": "8c2430b9-17e7-423a-92d7-0ff7e6472990", "value": "1536:uwQpj1q+Sju7ppw0FW9jtdZ6/AcChD/nR7scNpV4VqK7Hn8vBNeRgtRnnXlRYwyf:u5Sjut4jtK/pChD/l4ZL8rSkRwYXyAI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497324, "uuid": "bedb1820-cf38-4cc4-91b8-a37a1df8d139", "value": 124876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497324, "uuid": "ade541f7-5f08-4b4a-bc0e-f53a95cc216a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6c29efe-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774497338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497338, "uuid": "a6ded5ab-49bb-423a-9002-669550c50e63", "comment": "Malware payload (Mirai)", "value": "1c66357c7d4a00cb2003eba4d060d26f", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497338, "uuid": "6c15ba78-2284-4b06-877b-0a6c88b1ec8e", "comment": "Malware payload (Mirai)", "value": "cfe30f2b3a18b72405c7e982aae6fd2f272a5e4fbd6703674715bd050b6de296", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497338, "uuid": "4db49a33-a722-4cfa-b342-a231cdd374eb", "value": "T10E157D9DE786E0F1F57300F1025ED7F60534A12A9013FAF6FF8A266274727A16F162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497338, "uuid": "f5ab2beb-4d97-47ba-b143-f9c18b01c719", "value": "24576:QPviY/6n3AhIOhojX4oJMgTHWFDE92nU:lAhIOhojrMga9U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497338, "uuid": "260cbec6-f5d2-49f0-a083-57e144196b6e", "value": 927576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497338, "uuid": "3494a9e1-6f4f-4fdd-bfc3-44d9ce77c3b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774497426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497426, "uuid": "4e82b682-b9df-4b63-932b-7ccef48cc518", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497426, "uuid": "63b162a3-7346-45b9-aa71-f81ab7785bb8", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497426, "uuid": "ecee55d5-789e-450e-a8d7-9648cb5e3da4", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497426, "uuid": "46a66909-4381-4ade-876d-7e0172eff1ce", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497426, "uuid": "c38dbde4-7f77-4efd-a7ff-8d1a9e3bd584", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef3945c3-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774497460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497460, "uuid": "1e0d461f-c0fb-46b0-bd67-7e90cd7fb19e", "comment": "Malware payload (Mirai)", "value": "82a2db6408579dc8486adbe445df2881", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497460, "uuid": "b04e0599-6ec2-40e2-ba47-de600c095c54", "comment": "Malware payload (Mirai)", "value": "37c9c694f3fa721f213069d5ab032bb6c3772f41ed6e91c7525a4e1aa5abd7c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497460, "uuid": "5cba698a-b5e4-4c5c-9bf5-06c78b49ebeb", "value": "T115C32956B9529B12D4C321BAFB9E514933133FB8E3ED3212DD206F60678B4DB0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497460, "uuid": "278fd238-5934-46e0-ad95-9fb82ffc635e", "value": "3072:p9dnzPXNBriajy2Nj2kJLwawT9Xypcbt+oBy:BzPXNJzNiMUaOMpc/By", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774497460, "uuid": "d29f8d28-7533-4751-bbcd-bec9175a16d6", "value": 124680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497460, "uuid": "67a6dd8a-07ad-4c37-8f94-a7d15451da3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52e75848-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774498056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498056, "uuid": "e3aa41ff-854d-46f5-9340-2375db2856c7", "comment": "Malware payload (Mirai)", "value": "68eaed383f8eb83599e828922ab86b50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498056, "uuid": "10bd11a7-c371-44e0-9f43-f3ad7991d067", "comment": "Malware payload (Mirai)", "value": "22609df256833834d36c6d61e263fa78b6d625c05faf1460c289ff971b8e1e31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498056, "uuid": "ec5e6bcc-da20-472d-9e00-7d8684b8249e", "value": "T145C33A02B71D4F43D1632CF02B7B1BE08799FDA119B4F580651EBECA92749F62242E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498056, "uuid": "efa5f1d0-6f60-4066-a445-b24164360d47", "value": "1536:uqyZG7E+oTOOBoUw6EBy6oUXAAMrT8i+KFI/ceL3bfJD4L3/0XAvihvGJoHYeXZD:uq3A+/2wJYu/cudGIAvi0J2XuLS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774498056, "uuid": "ff5bbfbf-1295-4e33-8d42-304debf7e2e5", "value": 121464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498056, "uuid": "be2becd8-f627-432e-b7b3-c4342968fc68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "561e2db0-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774498062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498062, "uuid": "cfccd001-fa04-461d-89b5-a6343daa0d66", "comment": "Malware payload (Vidar)", "value": "19df18b072b29d78eeb29b07f194f15a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498062, "uuid": "453b9d97-c1fa-4c2f-ab75-5feb4054d548", "comment": "Malware payload (Vidar)", "value": "6eafbc6ececd35c9ab305453fe7175e8eafe6f4d08004b5d88227e00845c6c16", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498062, "uuid": "9bd084a0-a466-4fc7-84b5-abc61d8f829d", "value": "T1042423D65486902DEBFC50715B0387D8A988182D7E77593F248C39937B27A3B3E868", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498062, "uuid": "8fb8fe2e-5ea0-47d7-9831-ccb56bf51ab0", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498062, "uuid": "a8e9a815-e420-4b2e-bcc1-db8c41aec306", "value": "3072:rZnF2X9jXd8X0TF/P5MaQRIHTPKL+lcKfUmb/8RrzHlapVVH20e/QinBi0ME15xy:rOt0gFn5nr8lK8QSnkVVHW5MiaPIeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774498062, "uuid": "c6668df2-9b70-4360-b442-d5a580b80def", "value": 223232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498062, "uuid": "bf507dca-ef63-4f2c-84cd-20c27f0d2f43", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca3232df-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774498257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498257, "uuid": "f6298ab6-7227-40b3-b503-fa49b9b24647", "comment": "Malware payload (Vidar)", "value": "d251a720408b6cd3c6b9e483715fe01e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498257, "uuid": "3a7e3efe-8c13-4282-b9db-c13c1ac0dd74", "comment": "Malware payload (Vidar)", "value": "6888a1ed9538c4a3853728036d0ee154022d92083d95ca437679afb96511e616", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498257, "uuid": "c96d3437-1855-42b3-84db-ef887bbb4222", "value": "T154F4126B72B575EEE163463AC1514101D77278B29B215BEF03A843992F233D29E3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498257, "uuid": "00d60a11-7538-4d43-9c12-a0d99b3dc5a5", "value": "469e59bd592f93ae01ff61cd0d813e4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498257, "uuid": "1e831630-c5f4-4108-b7a7-7f116fcee914", "value": "24576:28VTV1quz1qcYl7NBu4QCT5HzVd3sjfru:2q1qpl7NBuhCTBzVVsm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774498257, "uuid": "8702068c-c6bf-4256-bd97-e5e507d4e7c8", "value": 788074, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498257, "uuid": "25760b33-3bba-44eb-9d86-f6ddd4cb0754", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93ffa240-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774498595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498595, "uuid": "e475b614-ef60-4287-b3e9-85b116c4a5ad", "comment": "Malware payload (Mirai)", "value": "6ae45c08505e61534904f6f81a5246c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498595, "uuid": "634d0d3f-4aff-4d72-904a-4d34771b13fa", "comment": "Malware payload (Mirai)", "value": "04c81f45441c3a817bb5e655abf3b48768e1b175c68945b9cc4e9b461429c806", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498595, "uuid": "85dc264c-d2a4-45d7-9b88-2cdaaf6b45e1", "value": "T137144A83EE890EDFC45BCDB086AF835B19E365AB4CD2F1F0583C8C1C755D29A56A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498595, "uuid": "e5c0b049-448d-4ddf-920c-6817d8729735", "value": "3072:HfZpyRHpBEKk6t2n2LL9mkso/yGDnNB0uOjGhU7CzCvQ5c+f7sWkB6qgcIr4:BsRHwKrt2n2LhhDXQjGhUOGvuAWkB6q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774498595, "uuid": "18886581-39fe-4e70-ac7e-78447a5fd547", "value": 205380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498595, "uuid": "b8c3478a-64b4-4a36-b208-acd2637521ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d070e66a-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1774498697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498697, "uuid": "11881ded-79c3-4322-93de-b45113839677", "comment": "Malware payload (RustyStealer)", "value": "90e46b780cd4ce4c76a64ad590b45a30", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498697, "uuid": "19599e57-d2f1-4b74-84de-e29eb4ed2dfe", "comment": "Malware payload (RustyStealer)", "value": "4719153be78a90d88f7fbe7f090948ae7e8a81c9a825207bb493af043e8582a9", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498697, "uuid": "48e1e1cf-1534-402d-afd1-16142cfbef13", "value": "T114051226799045BDD016C0B6C3484AB66BA674C70B32B9EF02C555383F69BF21F3DE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498697, "uuid": "fc4aacc9-7dfd-481e-b56d-6b1782e2b829", "value": "4774228f7083f8873979f200999f6bef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498697, "uuid": "94420da3-b421-4ae1-87f8-9399983d3b12", "value": "12288:TZ/bxzXvSEePIfM1+EnVak/LagVAznRFe+cOtAVc4iLQUT4QMJqh85c:TZT5HePoM1pnXLaFjRFe+cOqc3QFqO5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774498697, "uuid": "4064b5ba-896d-4f7a-9637-ff4e96ca4e78", "value": 811008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498697, "uuid": "60b06161-5cd4-4ced-9ad1-8d4cba4a001f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3feea6b-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774498703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498703, "uuid": "0f50db5c-bbbf-4749-a21b-8505124949d2", "comment": "Malware payload (Mirai)", "value": "de755c9ba7fc42bb4eaa1d31e5748e11", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498703, "uuid": "431f9c60-dc67-4f09-a0be-96e10727edbe", "comment": "Malware payload (Mirai)", "value": "e606655f23d4a6cc49851b114c2388468040bd89b7c8c174d7e1eda174148d75", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498703, "uuid": "183a87e7-1403-430e-be0e-43ba1b2eefd9", "value": "T15C141846EB804B13C09627B5FA9F43453323DB9497EB73069928AFB43F8779A4F625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498703, "uuid": "159d4271-a5cb-4b32-8bd0-dfb61715cde2", "value": "3072:a94ch3a15UTf6bo7pea/sfZ66aaRLHcKlsf+U3V/G88m:aua3AUTib0pea/sfZ667RNlsf+U3V/G4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774498703, "uuid": "73c632a4-27ee-4aed-80c4-366951f6c6d4", "value": 191255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498703, "uuid": "ad32792c-3f29-43d5-b662-181a4bf3d086", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bda4432-28d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774505409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774505409, "uuid": "273a0f5a-430d-4c0d-bac6-3b638ce5935f", "comment": "Malware payload (ACRStealer)", "value": "09328fce69a03edf82e8f44418edeb4b", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774505409, "uuid": "76a922dd-b032-4e34-b10b-7148ec00b927", "comment": "Malware payload (ACRStealer)", "value": "70fc8adce4713cd8c8fddea101108c29d7e0d852b725eea8d3821ff7c8b3d89a", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774505409, "uuid": "e7f5d297-c128-4e91-9e70-480e6252a3d2", "value": "T1A516B8579C501290C3FDB0349977992937B934A87F100BFB3749B320ADA27D9AA717", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774505409, "uuid": "2da98cd1-982c-4160-a8f1-32e031c4f00e", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774505409, "uuid": "65b7f7df-bb93-4b2c-8345-9e009bb70af6", "value": "24576:FOtZCRmtG/vUNdXU57woD1JNvmfjhwpRK/WPIajqG8cWD/QvUSrbEGcLZy0raauJ:FOuZ/cNdk7wo53mflwpoKjwQcc2aa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774505409, "uuid": "199d9123-598b-4243-8212-cfdae81a1a9d", "value": 4133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774505409, "uuid": "47f71abe-264b-49d3-87b2-dc9195527ab7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b22ad85-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "05dcc66c-9e28-4159-bf39-a4b975fcf353", "comment": "Malware payload", "value": "280f4afe74c3907d89e2baab24402743", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "f1781d4d-0913-49b3-a754-fd192e01f305", "comment": "Malware payload", "value": "717bb7be812fe4f57d4b7f1add1654b8a2dfb6063bd616cc26748039f247c43f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "77582fa2-bb8e-410a-a7c2-247e3d2bb973", "value": "T1E0F050928C78D296E6E6F4F5896ECF5E9A45A5C31115DB231304F8199CCC46BC4B91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "c835f811-7e9d-4933-9620-4869de65e65e", "value": "12:CduVxsMnE3mduVM1t2nG84ylAVQ3HFGhKX4AlmnNT+5:YuVXnuVMkAVmllaa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "375d83c1-d64a-4aa7-acd1-88bd436641a6", "value": 495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "9c1b4524-2046-4b5c-9424-570284bd6536", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b24e381-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "a82d9882-8141-4ae4-a7c0-5de0f1cf3807", "comment": "Malware payload", "value": "53a24f02c0a966046a878856c42524ac", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "7a3d86ed-b267-40b4-a352-a94b8c7bb0bf", "comment": "Malware payload", "value": "a78b29252a7954b588392b952b970da7ddb760cec7320ac4e8a50f79a8cf8f9b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "e178cea7-140c-4b01-b8d9-6062e7e9675a", "value": "T14FF1F05E7A0491682BC94C29AE3E56503523518F02117FAE243FE1BF5B707E4ADEF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "a58f32cd-f1eb-474b-9209-9a0941df03e5", "value": "96:CkMZdYEnmtlfipmM0NVXzPz7gFTx61zW3i4cxr3EUg:72+VMFwBY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "e306e084-a2eb-4687-878a-a80f251761fb", "value": 7516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "327c6d8b-7748-4e44-903e-fb16b0b5016d", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b24fb38-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "871abec5-d13c-4a95-979d-bb7949067483", "comment": "Malware payload", "value": "625cafe4c186f09ebce1f0f323c1ccf6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "98bf074d-5859-4517-9ac5-1440521808f8", "comment": "Malware payload", "value": "853f57f10f84ee3693b67fd18dc67346fa6ad735f8950ecf33443600322c874b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "2e2db1c2-0fcc-42b4-b872-57ca01f8b846", "value": "T1BFF02E19D88448BEA07FC89FBBE73DCE110F5150464B2E2D96B61C03B4BDD1850914", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "c02dce2a-ae9c-429d-b684-391d04718fd0", "value": "12:/VJ+TNLI5epY6iuy4ghsesFrFBEGghgu+hYuTyisJF8EpASNyiiuyw:NwTNLI5e2sZrTBEGCnuoLpvH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "60d5d118-59ca-4d13-a384-17c787dbd11d", "value": 472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "9abfd145-099c-477a-9046-703f9a11eabb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b27da51-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "f04b0537-1d1e-4b19-a084-a5ef12979192", "comment": "Malware payload", "value": "87cf044889d2dd577a139b163b2f9373", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "dada0034-3528-49b3-9971-7a0bf36bac3e", "comment": "Malware payload", "value": "f79b8924f58b1e98d221dfde52c4b1572dba251bbe65cd8bd44d342d70766a88", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "06f7de6d-037d-41ff-a068-6b24b3c6f727", "value": "T14C83128EB381A42F9ABE3A55D0F358A7BAC020C9847D19C5D52076C5095B7882E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "3d15f290-d3b5-4a8b-a54d-b8bac48cc384", "value": "1536:SDvsmBHGHiAs+1GBYtcI+lGqishGgQfHcFVmvmhzhBXwViL7J+zelADhnRgeb:tmB1NvgoXi9PcmvGwViLF+zLDheo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "d0ff8acd-389a-4b3c-83ba-a73cc18e8cda", "value": 82636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "69975eb1-858a-4661-bc74-bdb05d149ac1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b2a3958-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "54895e62-fcdf-4e11-8d23-c50abcc910ea", "comment": "Malware payload", "value": "85c69598722d1327b8c02327edbceb08", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "88beacdc-5843-4a9e-b820-74c25983f187", "comment": "Malware payload", "value": "e57fa4c2b241a133e349758630f3fc0b9dae8055268452d9b28c98638894ffea", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "6b394022-7c81-4e39-98a7-b053e4efb22a", "value": "T133B014D154434717145133175575415C7474515500F1F4D55707455FF1435F4DD4D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "6a6c1149-2f61-484b-aa1b-7ee4eeb4a189", "value": "3:lP/ErUBR9BJ5MaXFKZyMzZ18P53y0g7W7K4:lP/ErUHJ5bgrZ2py0hK4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "84f4d998-1095-48e3-9cb5-b5d4475bf315", "value": 121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "fbfac8e7-6fa3-45d3-9306-7bf79ab74c39", "value": "application/x-wine-extension-ini", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b2ad9b4-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "09c39caa-1dea-460a-8443-f1b0cc8f7b73", "comment": "Malware payload", "value": "cd0b85ad197b0fe8213f22e11d5a7a97", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "8d77dc96-f56b-43c9-89d6-977b6fdea4a0", "comment": "Malware payload", "value": "da55783ca9c4098e5ea47e33507bd38ae9851b6617b574d1fa294a6205cb143e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "f473b1a8-b3bf-4756-95b2-d85972bf40f9", "value": "T12C41EC1977D40F21E3F68E721076B2609A7AB815A9138E5D40C047CC2861B18E839F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "8d49d729-9177-438d-883c-7744feed791c", "value": "48:8WCmZDBdX3YSdwd0cKXuHcXv3bt+6NGDW:8WCok4rcMuavboMV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "c0d47ad2-e0b5-4206-bf4b-bf11dbc4c560", "value": 2396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "d4c80372-877e-4182-873a-9846620463c5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b2b8102-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "53544a48-1021-4f42-98d2-319209ae8118", "comment": "Malware payload", "value": "9bea006a179a13a3155bcc75c1807da4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "ff898bad-3b3b-47be-aec9-cbb1523e2bbc", "comment": "Malware payload", "value": "0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "6f644250-459f-4e7e-b6c9-2989bc1f7152", "value": "T155E0E7015514C0D4C81123D31149825955F801433C55F1D7FF408BC95E375B057C4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "3e8a1b35-5af9-4704-a195-aacf34d70d20", "value": "6:hFqrTFILwCfLKzd+2iN7yekJ5bgrZ2wZfQSAqoUF045:rqrGEGKAHNJAerZ2wZ4SAnUFX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "7508c8b5-fae8-4200-8a1f-33267d7bbf39", "value": 300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "e9b64623-4e95-4e8b-8183-4694ea73fa24", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b2e0808-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "9510833f-07af-4ff5-93cd-17a4d55e73a7", "comment": "Malware payload", "value": "7872fc0a3bedca13123cd072f2119b52", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "c4756018-1ba6-48a5-9621-bd8a12f8b9f3", "comment": "Malware payload", "value": "a9ebfd647cb5930c3a19c3fd66f103c06019f43aa53b8d309d31682514a9cd60", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "2577a58c-dd08-46ce-938c-bad8a5e74808", "value": "T1FEA3124C6412BF4EFEED97981D67C1314F2C75D2B1914011DAF82822C6C4A9B2E98E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "f6b3483a-d734-4a4c-ba93-1ea3aa983caa", "value": "3072:HxXyS6pbLiMlqsL3WooymubUR2cSU74yk:Ry9Ls43joymhA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507868, "uuid": "57851d29-4430-4747-b539-81aaecd22b2b", "value": 104873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507868, "uuid": "09634cf2-5b0f-4c2b-849f-d3161451b2ec", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c0217aa-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774507870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507870, "uuid": "2733b84c-18c2-4092-9949-e980149fd532", "comment": "Malware payload", "value": "0b8c50361ac789558470b6865544a9bf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507870, "uuid": "4419e5ba-ccf9-4d20-aceb-744211d4be22", "comment": "Malware payload", "value": "978a54a42629e0d19ef41bd5db7e560d618e1fdcc8e77c14694642840dfad8a2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507870, "uuid": "b5e75e55-e92e-410d-8f2f-f447c034e16c", "value": "T1B642F80E37821DFDC917C1788AEF5BB5F6B1740156195B2B0320D7371DB1AA8A739A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507870, "uuid": "de12c61b-9a93-479c-929a-9c59c6641b2d", "value": "3becd797f8f933aded29998917cb08d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507870, "uuid": "a0761304-0f8c-4335-8fe3-f52b4ab54076", "value": "192:jAUem9Js3xfAooQrn5fW4NqwZmD3ClCDNog0AGHohHoryZw:5dJwx4LC5RE3Rig8y2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774507870, "uuid": "b8b297e7-e255-4b0b-b763-e4dd60c72cd4", "value": 12800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507870, "uuid": "f0d07f79-da76-42fd-8175-3fa5bf9cedff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81477a8d-28e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508442, "uuid": "93855ad8-bb89-4d60-b91e-1984d28abd92", "comment": "Malware payload (Mirai)", "value": "5030de2b8c6ea9c34986aff62eb69115", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508442, "uuid": "0bad89f2-511c-476d-b3dd-4f4e7e8ec0c6", "comment": "Malware payload (Mirai)", "value": "e561415a538e1a064a0efc1bfccc637340702eb6f05a34a965e14ca1ae0b3d0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508442, "uuid": "857de871-86f7-4ebe-8aef-cb158407e6b2", "value": "T1DCE47D9CFE4E3C42E2D7E3789E4987E1722771E4D72391A33982434CD5CA9D98BB19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508442, "uuid": "a3d87830-2309-49e7-b82d-c706ffd8c760", "value": "12288:iIV34M5WVqAMbYMuz/B1l5jtKITyWYeXe3maI9ORDw5dWMzI:NV9WVqoTB1l5cIW9i0da", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508442, "uuid": "aa73d4d9-16d3-4395-800a-fbc2b51ff0b6", "value": 702064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508442, "uuid": "5ade62b1-ef4a-419f-8b95-16925087268c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68dd5e96-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "c1c36f4c-bee0-405c-8946-91128b5e1aaa", "comment": "Malware payload (Mirai)", "value": "8057f79310f38de111b67d08f4874e02", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "907fa574-8b3e-4a9a-83e8-6d0357b9a85e", "comment": "Malware payload (Mirai)", "value": "b8719cd41d837981ebfecc4f522cdb4fd65fbca7b526c8cb611ca35bcb75c090", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "a1e97a44-e99e-423f-ba97-bc27a7439f2c", "value": "T1AD93D551BC82562BC5E423BAB6BE668D336577E5C2CF722BC8214B217B8551F0C63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "2eff5052-a278-416b-8c57-bd10155ee648", "value": "1536:Ud+d+6yn9H/NTzULgW4W2luLaN5q00brz9ikZcxew+7Yf1:++dAn9eL6w0ecxetG1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "4627b765-e5b7-41ce-a943-c0b34fddcd70", "value": 93800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "8aa972ef-8281-4b4c-aef8-ae6f88db9c5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68e0c06e-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "5860489e-8024-46b9-80f0-fed495337883", "comment": "Malware payload (Mirai)", "value": "daa16d77c44eaa5d521b405b44026841", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "9f254c69-c089-4201-957c-e7b15f218842", "comment": "Malware payload (Mirai)", "value": "dfd4e8bf4ee5b630791cd1f0bbfffdd2146bde0c28fdd241fc818b7fbc1e9e8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "266370b7-7a70-462c-a02d-7873473aa34f", "value": "T130A328A3CC762F58C628D5B4B0B18F796B93AA6181475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "330afd21-85f9-4676-999c-02a8a46edf61", "value": "1536:7tufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAU:AbU2RC4kPCtSzWu3/3L1U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "a65f15d0-6950-4693-9f1c-79fc8f37120a", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "085e9520-45e8-4954-9036-2ac949281cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68e34fc4-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "de760ff4-485d-4845-877a-67f69643a156", "comment": "Malware payload (Mirai)", "value": "0064bd45fdb7a8dc60d1d0a72590f8ab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "959b6fb6-7618-4331-a1a3-f4e0da447773", "comment": "Malware payload (Mirai)", "value": "ef272ace40356de00e1aadf44b94fd62bde97e5756831750dde8927b2fe9eab7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "d0a48361-85ff-4182-a10a-353a52f6c021", "value": "T140E34D8AF802DE7EFC0BE57E44670D15FA30A7613243172D529BFDA3AC321A65D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "08614adc-bfb7-4aee-90c1-7d95f89bdc9b", "value": "3072:luWypdcGShA/eVyPA39TsZJ243nxl9XzrTmdVp:gCGShAWBThAxl9TmdVp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "c4150d76-4f50-42ed-98b1-06c7acde4a54", "value": 146888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "dfeaf3bd-f45e-4117-8b3c-9fc3bf892814", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68e50af0-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "615016ac-883f-4ae6-a625-10c9223c2914", "comment": "Malware payload (Mirai)", "value": "efbbd0ee41e6107fc22051a1bf5d03f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "e4401e85-8809-4b79-ad0d-a73decf0bb37", "comment": "Malware payload (Mirai)", "value": "501a02eba46a0e103b38964a2e6a9bc1b0a8f53824544f84e8a12b41d562c313", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "9c28bd85-348d-46bf-a6cd-6b6ab6adb5af", "value": "T13D333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE62AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "50346ac9-d7f9-4186-a8ac-8f671b8d4962", "value": "768:1wheNR1eCZWUJ2S7pRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98IN+s:1wOt37pOzwLMU431ANA0BLBCsr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "792b9974-bfac-435e-938f-06819fb9f28c", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "67900c14-2952-4c80-a89e-6ef6c5b32af3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68e8b19d-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "006d9ae7-c98f-4249-9094-c79d22bf5d3d", "comment": "Malware payload (Mirai)", "value": "dde3d25509a2668df3917f1d3cfc5c54", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "820388a3-788c-4be6-8bc7-097047e5c580", "comment": "Malware payload (Mirai)", "value": "d739cf94dce3ff153cc22a4b8af4c4fe4fc82cb3ca132f23faa77c9beffa7306", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "93632d18-6251-4899-887b-abfb0e1583d4", "value": "T10632D517A7BBAE1BC4D037770193072162E95F916024472F7D0D1C8E2E9A3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "b79250da-94a0-46ec-bedf-19048d8be3af", "value": "192:xvrOR1CQOsz1NxfAzhH9iG0GhWaDpU/O7Q89AGSybADqeif:xvrbCzfah2GwIU/kwGSHDUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "2b0c4392-f989-46b7-b68d-990f8e00c258", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "c152c3f8-169a-45ae-b06b-66fe60671e8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69142200-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "49f15bd7-9482-44f1-aefe-277b05001930", "comment": "Malware payload (Mirai)", "value": "f1ac51d6d59106e557aac61e191e4f0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "7ce8f226-ab9a-432f-9dd1-09bf78471eaf", "comment": "Malware payload (Mirai)", "value": "42258aad7bdd5e063523159905dbf35a87b4a9e13a091d9d9e17f030dfe9af6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "2f19787e-ec91-4dbe-a3cb-7da04873b370", "value": "T1C4B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "9f67512a-f3d0-4ddc-9697-4a175c7a0a62", "value": "1536:pUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zvb:yixnUHz4Z+5ypkn3E8b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "85ce640a-14ef-4400-8028-b791d03346dc", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "2b4c5de3-846a-46af-9ef9-db264e9d7533", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69192d2d-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "1c4a594c-270f-487c-bb4f-8c803e6b5425", "comment": "Malware payload (Mirai)", "value": "33029530f6b4db9e81956eb6c340ed13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "44f9c3c1-b751-4a09-a711-f0737a36f000", "comment": "Malware payload (Mirai)", "value": "efa1a2bfb85f8d16c46e879bad1c786c26df58377f346bba92b515e07abf4189", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "f66611eb-3b57-4634-88de-ce533cfadacc", "value": "T158C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "e19f7ef9-cc26-4e97-8b74-f6114e722f8d", "value": "1536:60B72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3d6J:6mB4exMF7oZKJnCNYa0J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "0419af65-0ba9-4467-8f7d-03b402b62d53", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "89becec2-fe06-43ff-9041-1c42e81f146e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691977e0-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "1b22a289-9c58-4759-847b-3b99a972965c", "comment": "Malware payload (Mirai)", "value": "c0373303c658407ac396d17ddd2de9f0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "4cdbe753-6e29-4aa0-9dce-924456d30925", "comment": "Malware payload (Mirai)", "value": "52f6d728771da615b4646a695df13ffd8ba413ba611fdee2b70f9ca8227265b8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "a8ed025b-f362-40fc-9a63-e47a58753242", "value": "T12DE34A55B8828A22C9D513BEF92D018E331327A8E2DF7213DD205F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "b6a0db6a-4f3b-4747-b354-950738953f49", "value": "3072:ENUkePbhroLLyLQPDADuOu1sya89LjPEKe2+IOkx:weRoLLyMPD2u6yawpe2Akx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "d753ad50-9717-4ec3-955e-a76eb8c792de", "value": 145544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "a13f5139-a0d2-4688-a7b6-498facbdb3c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691a0d16-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "39f57cbd-0e34-4a10-ae80-a71db39f8037", "comment": "Malware payload (Mirai)", "value": "f6c29f68ce589dd8c4306d109b65f312", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "d7be1e15-6275-4498-8d0d-6fff85785299", "comment": "Malware payload (Mirai)", "value": "83de4269221aeb74db1618e7903a9547fec587af08f07e178fc76c55e513c142", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "4c8c2dfa-522f-41d3-b560-a86e0f824ad3", "value": "T1CCF33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "b4bedfc8-48b4-4ded-a16b-a14e100284bb", "value": "1536:PdMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpPEn5p5M/LW:n7vDtrnPTR71gmX7Dy7fMpPxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "31f792ce-0e51-4789-9a1f-2ce22308fac5", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "d2ef3ff4-ff70-4c94-86fa-d6d84479986a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691ad3da-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "4ed7ada5-4c34-49c8-a5f2-09de9af302cd", "comment": "Malware payload (Mirai)", "value": "43ae52a6289078777b3c27b61ba612e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "8ea75f8c-0940-45db-b30c-2fe8cc945ec0", "comment": "Malware payload (Mirai)", "value": "98bc000407544dd8e14d30a3c90ae5422076bdcbd0afb6976729a2c4ccb3c54b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "59ed264c-7363-4c12-a63d-3979ac4e0599", "value": "T181B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "c0696cc2-7233-4b73-85af-16e977013229", "value": "1536:v7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCx4:DzPqF41OUBljSIxecUtCu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "57a27e4f-28a0-43e0-b77a-45eebcd0e796", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "31b50ca7-6d75-4b7a-9028-48a796f01674", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691ea47c-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "f6a4349e-cb91-4111-848a-1131427f6589", "comment": "Malware payload (Mirai)", "value": "6fc7502c5270236ee0d4f240ad60b74c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "20360a44-6b67-4ed7-99e4-be82bbd6fd95", "comment": "Malware payload (Mirai)", "value": "5b43bf49cdb6051d87b4e14debee89d1ed14732b0c6f469ffef83b34813f8ed2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "b7148818-5fc2-47b6-98e9-a3837919fffc", "value": "T149C39D32D8396DC4C1945434F8B1EE711FA2A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "dd63c539-484b-47d9-b00e-b75e1bac2752", "value": "1536:6aZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKLYd7YaXgDe6u8KSgnMwSMwm9rFHu:6f5Z5Z98XdmVMJaFaXvbjSqSMrHQwEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "219d01ec-e883-483a-bfae-da6a2599be55", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "2c9405cc-59a3-4daf-bd77-dce2d9298186", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "692163e3-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "43fd4a5a-fb11-4260-9072-874969e0ba8a", "comment": "Malware payload (Mirai)", "value": "56e4c8419bc54a7d27c06dcada1dfe43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "579f3cc8-bd5e-41e1-ae38-c88fc4be6256", "comment": "Malware payload (Mirai)", "value": "b59627803c1e36b3dce1b27831f01e70ad9c0a754dd02200ec58f9c271574430", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "b0cafb15-4f62-4b22-85f4-4a6eded398c6", "value": "T16BE3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "4ae5ff07-1447-49ea-a396-8e9b62b7797f", "value": "3072:exjJw1Cc/0s6YAPwenUr48pzfR+JonOy:exlw1xAop0YfRO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "38a6af7a-9ca6-4bad-aebd-6619c03c3823", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "56c1c327-2df5-44d9-9f86-e082c5d1d9ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69218759-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "60aeca54-6fad-43ec-881e-6b1dc36e6d4f", "comment": "Malware payload (Mirai)", "value": "65ffd4316d47223f16bb59f4f4741d20", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "1b6fe3eb-3073-4d81-b14f-719685bb8f56", "comment": "Malware payload (Mirai)", "value": "e854f11e5377b7c7f24b82e5bdb1e82b8075ed4d45e48e0c49ac8aca64f6ec10", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "7fe2e186-96b5-4426-bf50-a09ff2d4b2a1", "value": "T1BB343B45EA418A13C4D117BAF5AF418A3332A795D3DF730699286FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "07079f36-6bfa-46e0-859f-f3f5307e7658", "value": "6144:sQYf71sTNfH/a7KKck/l9Inplzx6f9ihM/9eAU:sjxE1H/a7KKcktOp/PG/wJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "785c2d23-a355-41f7-a89e-c5b8ed06d7e1", "value": 230968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "bf198bd2-841a-4b3c-8f19-e7b633383248", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6922a92f-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "5d3d82e5-8b36-4bf6-8b6b-f5a0a8662ea4", "comment": "Malware payload (Gafgyt)", "value": "459a0a60463d3ed5919dab3d8f7c0624", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "1b876370-7589-47ae-b352-23fd2b520a16", "comment": "Malware payload (Gafgyt)", "value": "c7cea6a0e444dcfe9c89ef4535b6e43161759072b35a323e191eec2748eb2106", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "3083c239-c195-4b3b-a307-f19e46037e42", "value": "T1BCC32A05F5548367C3D327BAFB9E439C77362A6453DB33115938AFB41BC2B982E2A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "449d0325-cf77-40fe-9527-8b249b895874", "value": "3072:OFztpWMt55uvy9OrFFwFukX93gCrw1cGrwd8fm4QnNJXS7E:6WSwvIJvX93guw1cGEom4QnNNS7E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "47e68e68-a5b2-4f62-84fb-4a7cd5fc21cf", "value": 124557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "9f0e2d8a-fc90-4006-b172-b6a2234f44b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6922ba3e-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "17e92c80-52ce-45fa-8fa0-12a93501e6f7", "comment": "Malware payload (Mirai)", "value": "8ad4bbf4b27c27ff1b06c04045609f1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "6a540bbe-fc29-4f45-a3be-1370e1242ed6", "comment": "Malware payload (Mirai)", "value": "0a05916360192b441abe9eb1aa42f3b12c963d22a92893aa62a07afce26dbc27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "d0ac2f7a-7a01-422b-941f-29c05297e84f", "value": "T120C30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "1927f650-8dfb-4595-9c97-3672059258b8", "value": "3072:fAD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1n:fAD76aX9aKTcRQVnoiYq1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "0b0f2ee3-9e5b-46f5-820b-6f9aa1b0a5fe", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "e68244d1-580e-4207-bf4c-86ee85267a85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "692d90bd-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "a9f8e3dc-855e-49fa-93d9-d26aaf52b63c", "comment": "Malware payload (Gafgyt)", "value": "6f624d8b528c73d3dbb0dfec689f6bb0", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "f42da485-ad1d-4c76-8fd5-d3a5acd161d7", "comment": "Malware payload (Gafgyt)", "value": "aadc06f1683ba615307937479630c8235bbc114656ee28a7775ec54777392666", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "e42d0c4c-e3fc-455a-b580-6f331e295fa0", "value": "T133C32905E8918767C2E217BAB79A425D33332B6893CB33255938AFB41BC1B9D1E791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "edffde04-74b8-4610-a5e8-3307ffab8f9b", "value": "3072:KdB2qwap6KVXPi4jv8x+oMDkmDhZmTQOIsXAqE:aRwap6Kt6+oMDHZmTQOICAqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "f7a1099c-dab2-433d-a8fc-bce32cf37543", "value": 127529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "20d8abec-eb02-4812-bddd-5ba41fc201b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "693017fc-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "92cfaa24-74cb-4ff4-8d07-44dd3f4605ae", "comment": "Malware payload (Mirai)", "value": "80fd083cf9cf0cd2061ad58ec033fe22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "b98d14f6-41b8-475d-8fb8-b5d5d7b686a5", "comment": "Malware payload (Mirai)", "value": "62ea0dff63ad36645cff88b905c3fb0096c92db4bf571ddc312b20142cc0c03f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "1f31b7e7-f247-4647-8a20-8ea077e125d0", "value": "T18EC39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "37558891-dd2c-42d7-a5da-e20765e1c0e6", "value": "3072:Qf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4nqe:Qf0tJBR4NSALD7rnCrheigqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "53a67413-08a1-4738-a67b-b0049c29c024", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "ffdbf3ac-e8bf-4cf4-af48-ddccfa3092d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69363a0e-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "7d0f1325-5694-4a5a-86c8-b8cef96dfdbc", "comment": "Malware payload (Mirai)", "value": "bd73179f9ebd4a7ac5608bd88fa9901a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "f55fd7eb-5f7a-4b2a-a26a-3dc10455bafa", "comment": "Malware payload (Mirai)", "value": "8d13aea9c3759414f1888998dd75f3f52d027587cf010f9570adccce8b96301b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "44f89c18-6809-446b-a922-43b72f7434fd", "value": "T132930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA5B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "c3442167-e3aa-4b44-ab1b-eef5b8fd0a85", "value": "1536:wqnZI8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1Y4n:A8NUv5nTacgzafVAwe4BNRIbT2gXD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "67704d09-caec-4e03-8255-b6337f6634ec", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "46782e61-146a-4632-8b19-1b7b7da69ee1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69475a24-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "1cc7e351-0f44-44aa-be3d-6c2e8f29a1de", "comment": "Malware payload (Mirai)", "value": "131244033d1d8a7b759c61c27851772b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "9ee3a660-2d76-449e-a71a-d84f028b2f05", "comment": "Malware payload (Mirai)", "value": "e8401e2e92d1d7ce3943ab8572aa50874bae6e832bb0ad7f27b705d5bcb7bd97", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "e0b640ca-b05b-467d-b9f4-ff28f0fa8565", "value": "T18223F1A3B5FFC4BCD432C9F92A0282C6FA6B645703595F8F54A8F2A674A42D5FA035", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "bc113f6c-16f4-4660-87a0-79877004afe7", "value": "768:xUmdMQ0QhyWXeNHucO8nW/ww1oZ2YI/udvgvNrcf6LRF0qD1A4M:XdM5QhFv8W/wCI2Y/dv+BxFp1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "f46e744d-51ba-4ebc-8623-c7a5d0344770", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "8bef53db-8748-45f0-a54e-7395b385c913", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69476df8-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "664c76b0-f4d6-4ac1-93fa-a24bce9da553", "comment": "Malware payload (Mirai)", "value": "6473fd5504f28abf126730c0040c0687", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "bb5def98-9e9d-4c6c-83fc-7851f9e3b8f7", "comment": "Malware payload (Mirai)", "value": "2e14916bcf05bdeda03f9aa28a2efe44152cfa2b42cc12eeae66e83a45e4d433", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "f3e84397-ba19-4ebe-94a8-23ff4fa3fd79", "value": "T1F9D3F8C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "4384b54f-5624-4d0e-9fc6-5a6b64590de3", "value": "3072:SNbul4MGHJLqHy5Fut5K/cwpifdDounVoQV1jbiGLD3rQlJ:fHy5ct8/cyiWuVosLD8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "fb93bbea-263b-4fde-aa50-dab3d094669a", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "d44cf3cf-2ce5-4595-8ded-1d9c14903b50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "694dc779-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "0447d3d5-6b79-4e86-8835-7b6cb351cc27", "comment": "Malware payload (Gafgyt)", "value": "ec715423c45dea042f1e6d79b8b9026b", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "3ac1170e-bc91-494a-a6ba-fc77f4066b90", "comment": "Malware payload (Gafgyt)", "value": "6bdd6f123e127b8758a6c47802cee290ea21ae535edd50b87301d5cdc483a11b", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "fdca4b97-e0c9-451a-a173-362d14eeb28b", "value": "T117A34A5381A89EB7C083EE7929EB99701327A9521B2F1F5421385BF4038F9CCB54EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "77f910c5-09a0-46ab-a10f-4eb67479e50f", "value": "1536:2iG2udDHZk2TwxoGt651dY6zMHcRyb19xVtq/Y8W5mS0T/7LHYvE:c7DJTwxoX7LcRbHy8mrT//HYvE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "4efe3607-7485-4a8d-86fc-15384024f7ba", "value": 104407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "5962237b-fee3-4853-88e0-271ee2efacc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "694eed01-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "5946aa7f-8134-4fb5-b1eb-445fa7fa2756", "comment": "Malware payload (Gafgyt)", "value": "d1f27b6c0c8fadabee441e196401657e", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "5124b58f-d202-4902-a2c8-6c8614e5f549", "comment": "Malware payload (Gafgyt)", "value": "bdc0f7bf3dbe709b180fa173660a572e485c7591a07b64de06592503676e9fcd", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "3602ce33-122b-4d3c-ab8b-fe5105e9cc10", "value": "T19AE3A55AA7719EB7D81FCE3306A6861114CCE95252D83FBFB2A8C618E74B84F44E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "29139fa6-5aa1-4ba1-9897-94d8ab17cc30", "value": "1536:gcuej0iv6CiFpYo/rVd24hUoOsVsPnhxiuOKLf5KCpx5tQK/nm6Cnb65HIfE:gcgiv6niboOVpx5tl/nmbnbUHIfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "ac3a759a-2111-4fd3-bf00-e9a392c69679", "value": 153902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "2c3ad383-d202-4050-93af-4dc0cc4d1b35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "694fb5de-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "f266d65f-8c2f-4ccf-b14c-3599841bf365", "comment": "Malware payload (Gafgyt)", "value": "0d1ad954cc2748e034bc817a90d64978", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "11fad5e6-0eec-484a-9c9f-41cbbfb40732", "comment": "Malware payload (Gafgyt)", "value": "e61771d6545a0da7b166378aac2ea0dc61c3a1c28156c1a72bb1a780a66ef81e", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "2b46c5f2-3396-4a85-89eb-349e4ad4d678", "value": "T126C31905E8918767C2E2177AB79A425D33232B6893CB33255938AFF81FC1B9D1E791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "24b09dd2-a2a2-4bbf-944e-698be1368681", "value": "3072:KdB2qwap6KVXPi4jv8x+oMDZmDuZmTQOIsXAqE:aRwap6Kt6+oMDfZmTQOICAqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "841ad7b9-b438-4de0-b688-a791181f213b", "value": 127529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "0ebea0df-c508-43bc-b3f3-38acb852422c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6950426b-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "389f4780-18a9-4938-b72b-8516eca1f235", "comment": "Malware payload (Mirai)", "value": "d4a262fa634f427818482a7e52f866aa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "83c41ba9-e8c5-49e1-b939-7cd4a904261d", "comment": "Malware payload (Mirai)", "value": "09d1d90aa7dbb17c76865b5f32234ccc0d505e2f2d0254844d89b1b39a85b3a8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "36ef3671-11ed-4c7f-b37a-4b24ff1462d4", "value": "T178B339C1BA43D4F5EC1641307177F73B9A32F0791239DA87E7A49E327C92A419D0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "fc3dd750-3ea0-4d2f-90d5-71360e517a4e", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wlzSr9bMFflM:Pbj4doYGFB0/45gdB9ulM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "e29ded34-b407-4070-99fa-877cd14e79cb", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "8b1ca0a8-132d-4e32-89df-8e65e309db2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6950601e-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "a38f0974-532b-4ed7-b4db-9eeb6ef55901", "comment": "Malware payload (Gafgyt)", "value": "c3cb8d93e3a472db72d012b7594b2aec", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "65acfc3b-f6e2-4547-bad6-6d08d307c246", "comment": "Malware payload (Gafgyt)", "value": "589719abb14edc2f9c39416fe75d6f9d4d93a5521b43cbc272adf80c04de2f60", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "cd9d60b5-8cd9-4a2e-a7ff-456e6603fce4", "value": "T1F9B32A17CBA6D07AC48B13B11BDF86269963F4BD0772312F23846FA05F05DA99F5A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "d77ede86-b0dc-4117-9613-7c52dd71e915", "value": "3072:I1Us+1yGIqOYzx4EX069gKwlKhzVrm0mlTcyH7od:5r46WkmlTc47od", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508831, "uuid": "b4b9ce3b-4469-480b-a7e6-f8d6a679582b", "value": 115519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508831, "uuid": "1e3b166f-b915-4c66-a2b7-02249f60641e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "695a79dc-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "ddbc686c-c0ff-4c33-8a78-0663ff9dc8ef", "comment": "Malware payload (Gafgyt)", "value": "6aea82a59fb9e9581b5da98a22656706", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "5baf830c-0ee3-483b-b6d6-165d14d8c2b7", "comment": "Malware payload (Gafgyt)", "value": "4f8f5fd56593db949d61db2b961cc7b8b2cd03ecfc3b4412b8590db3c0dd599c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "fdf9f960-89e3-4f9f-91ab-3b36a8db9c30", "value": "T127E3656E7A22ABBEE168873107F39F70D39515E227A19341E2ACCB185E7138D1C5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "2c946de1-f5d0-4190-b6d5-b0107136bceb", "value": "1536:0n/SF/iP6OzAGS2rKZluV0Qx1ExNQJd5OpgSJDsBHEgBuuAzWgSH6VBNJvVm6Cn4:X4OKjnbSBsQupH63dmbnbUHIfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508832, "uuid": "5a07cb04-9cc4-4cb5-aee8-d6240c45424e", "value": 153902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "6151fffc-a9ed-4ad7-ab98-6bd0cb370520", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "695e007d-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "7756a5b8-2be8-41aa-9162-135594f68b90", "comment": "Malware payload (Mirai)", "value": "aa58bde03be3fee36bc2d66d5c02edb5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "932e2b97-0d99-4a51-870a-6050e7c67153", "comment": "Malware payload (Mirai)", "value": "514e1203a70dc1d2c336b635ea4eee7844fe62ee6543c8128fa5419abd050787", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "f382afbb-67b4-40e7-a7ec-cac6e6818af0", "value": "T1DFE3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "ae509dd8-4425-430e-af1f-4fad823499b2", "value": "1536:p+LTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxGdbK:pMlybKpzEOfGQ+vEubTt4ouftL4KdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508832, "uuid": "fef6f8d5-265a-451a-9def-68980057fe1e", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "2c1248f8-e250-4e7d-a3ef-ace45c322c8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "695f55f3-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774508832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "0400b874-df9c-4589-b878-a4d3eb3c3d87", "comment": "Malware payload (Gafgyt)", "value": "71894bdd7b3ffe5407eefa88e3caa891", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "8c63eed9-6d58-48d0-909e-b39d620f4ef9", "comment": "Malware payload (Gafgyt)", "value": "34abc4cee41e7fb0e30640ae4f76132ec80d42da2b031df9ae341b298920b927", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "7b1ed126-9ae4-4a2f-a587-a95ad3ec91ed", "value": "T11EB30A13532D0A83C8DB9A702DA72BF2879DBDB112A36141990FFF8453739B81167F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "868d7901-7ef5-464e-847e-7efa97933338", "value": "1536:aE12l+uDTKcmQem9adzv+P32B7nvXnIAqriPtSomSgT/hQgKE:aA2ZDpmjGOhnvY2PtSom3T/ugKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508832, "uuid": "681f424d-3ce8-4be6-8cc0-d723b681d362", "value": 111623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "eb3b3582-0b12-4a96-9d92-71f3d4fcef47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69783ce6-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774508832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "e82be26d-f37b-4ff6-acab-f9b7a4ea6cae", "comment": "Malware payload (Mirai)", "value": "e10d63cb5e48931b6f23a6cd35e05615", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "4e56a8ae-8fe6-4aea-9abd-40c2e087fec9", "comment": "Malware payload (Mirai)", "value": "7f44bab941b1a462a9ea192d715afeb486833058af2924d1ce565d074774788f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "1f1b68bc-80b1-4c50-9dc0-e42cc51a9e4f", "value": "T1A6F3C50E6E198F7CF79987345BB79E32925833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "d568e674-638c-43c6-9a20-b1fc59df694b", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwj:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774508832, "uuid": "200fea88-3e74-42f5-8a57-fe2002acead2", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508832, "uuid": "fa390abb-165c-4d89-a396-f6958793195e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3d47b07-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1774510299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510299, "uuid": "479a2abe-b960-4ad1-b116-d2185081c4d8", "comment": "Malware payload (DDoSAgent)", "value": "27df53f9cd07d454c401001d6ebba42e", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510299, "uuid": "cbff7940-f417-4d4c-8027-331e5fb8eda4", "comment": "Malware payload (DDoSAgent)", "value": "505d429c30920de8738ec53459ffe674a47554091c6c0a45d0076d456c1407db", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510299, "uuid": "5b44ac3f-54ee-4a71-8e1b-7b4a72c891a7", "value": "T189157C4BB2A374BDC057C43043ABCAB2A935B43542226E7B65C8DB303E17E741B5DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510299, "uuid": "583a2776-58cb-48a0-9910-d0fb5a6d6847", "value": "24576:X28n44sjkmvkbj6hTeotCxLQ+B/2ITM95x:mP4sjkW1htvmTTq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774510299, "uuid": "301fe54c-385e-4481-a2b3-a53bddc88736", "value": 899144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510299, "uuid": "e3a89f42-af58-49f1-a7be-a089ed6ed88c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae065570-28e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774511094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511094, "uuid": "d0902246-4c3e-4a86-93da-46b13d5d1f7d", "comment": "Malware payload", "value": "0f6ea4e520f678d0e6bad65590d0f15f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511094, "uuid": "bf9d4b71-9749-41bb-a3b4-49af312bbfbc", "comment": "Malware payload", "value": "5026c75dbe628f6991f007a02b2b2d0cd2733a73b97b0cbd37c9aab3331a97b7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511094, "uuid": "9b2c0e9e-4d4f-4165-bcd4-eda302b102ed", "value": "T1058309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511094, "uuid": "ab340657-d485-4ada-abf5-dd010f069654", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnRWaaVN/:XEKltp9txAX/yr2pbRWvVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774511094, "uuid": "80e462a2-3dcf-4ca5-af47-057b985d42d0", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511094, "uuid": "528e97bc-5a9c-45f6-a729-fa7a286b8870", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43e2b7b8-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774511346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511346, "uuid": "6ba9afd4-a18b-4e86-8193-9fb5ae82bf99", "comment": "Malware payload", "value": "fb46892369d474df30ff4ff4cae36f91", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511346, "uuid": "b471c1e3-0351-4432-953b-fe22b9510a2f", "comment": "Malware payload", "value": "5d6ff93771462db219463888b6323a90405446ea49477e1cabaa788f530a5ace", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511346, "uuid": "251f4607-abac-4819-ac76-f1a58c3f70b8", "value": "T179F49E1AB2A802FCD0BBD1B5C9534A17D7B1F84A1331AB9B03E05A962F376606F7D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511346, "uuid": "ae73c40a-f73b-40b6-82f4-e03026164b2f", "value": "c5c7e4d2a8d755721878e9ee0a95d529", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511346, "uuid": "1c56733e-3ba6-4560-9683-2f38586ddb03", "value": "12288:tHca0g0UG2ZyJpKSq7AEr1+qeHGcpLubMRu2LCDAxF:td82Zw0SEAEr1VwGgubMfPx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774511346, "uuid": "fad81325-34e6-48fd-86c3-68965d223146", "value": 733184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511346, "uuid": "6ed844d4-e46a-4d49-9d1d-da71d6a5137c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45566f56-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ChromElevator)", "timestamp": 1774511348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511348, "uuid": "7c71277a-3825-4d30-861b-c555741e7992", "comment": "Malware payload (ChromElevator)", "value": "7afb8405508b1c058ac153fcbb31315d", "object_relation": "md5", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511348, "uuid": "a8bc5758-f089-433b-a659-3176bfb0be17", "comment": "Malware payload (ChromElevator)", "value": "5b7e11b5695b104a26c0b78c311578ba2a3739e1af590cc17f65ea4c6e77f79e", "object_relation": "sha256", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "23e05ba6-aba0-42f3-bb82-f4d6c4f5734d", "value": "T195F5338677A95CFFE4A39479CDA24748E6727C224791EB9B079007924E17BC18E3FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "2668e1d0-248a-48ed-b1f7-fda891aafa62", "value": "54900ccfb545b5ae7e626203f26ff348", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "c18c9ab2-0f30-42e8-a193-606d33a69fd2", "value": "49152:L01B/I2iwIY0G+JAk9U8lr0H9WOvttHeYmOZMbL99OIVfzvE09OO/ViMlYr:6Q9VGMhDlqTjgJ9hfIMO0VrU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774511348, "uuid": "8303f1e9-713c-4119-8da0-469953558f49", "value": 3416089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "c6bc1a1c-5ce8-4b2e-91cb-e91e0d653235", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "455bcb1d-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ChromElevator)", "timestamp": 1774511348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511348, "uuid": "e49a4adf-4ab5-4cb9-b0db-82602ce197dc", "comment": "Malware payload (ChromElevator)", "value": "66c136089272bbd910017cf4528467b0", "object_relation": "md5", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511348, "uuid": "993667ca-4623-4bf8-a37d-0fe296be00ef", "comment": "Malware payload (ChromElevator)", "value": "74444301b3b3e5dfe1d7c60f86d3900016d9d1471ae5d8be4a5c72a3d99a16b3", "object_relation": "sha256", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "f1b657e4-7c18-4532-b2e4-dffefdc59a75", "value": "T1F0F533163BE46CFDE1A79435C9504609EA72BC8A4731EE9F039406D5AF23BE09D3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "d2edaa40-ec67-47ad-8c16-ccd5c46ae945", "value": "54900ccfb545b5ae7e626203f26ff348", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "3470de7a-d624-435b-a023-18828d593a53", "value": "49152:L0IyTHIdBhDcIFaPhayDD5N1tk3ExZ7EBpN4vTGhO5G9USOh32478xQagH141vQW:PEaDcnPhZDbM3gZE2SOh324aGH1cQp0L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774511348, "uuid": "1d784b7a-8d1a-4402-9d3b-c37bc7a122b7", "value": 3435033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511348, "uuid": "2a93d053-f6b6-47cb-bf49-c673e2f35078", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46212fdb-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774511349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511349, "uuid": "632bf690-aca8-4583-8679-96c71b59b824", "comment": "Malware payload", "value": "bff44852ab83e419e2d033ef676d95e2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511349, "uuid": "019a5d73-12f3-456b-8325-1acf47c04359", "comment": "Malware payload", "value": "f6364cafff6f3287c2be65f6818f18eae950d4c8d95bab4dccf2e79cba50123b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511349, "uuid": "efbdc464-2c5c-4a62-9e4a-ef5c5d80dde3", "value": "T166765D233A7C6A39C025D439C7967131E1B77EC79EA50EC6CA518978FF0B106796AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511349, "uuid": "8cacc665-7ad8-445a-bf18-96462b0428eb", "value": "001cf29d03c67c0d9ce2c94dd14dafbc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511349, "uuid": "a9b66f5c-097f-47b7-ae46-8006bc764b70", "value": "49152:s0D94dUgu0DeVdJjv6z0ELCFKT5q/vOpy9Z4Plt5jXUHjQcRyLN2vB5:/oUgJWJj/EeUT5IvO4Z49fr8jncLN2v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774511349, "uuid": "2ad26511-7cf5-4e17-aa30-314802fa76e3", "value": 7299072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511349, "uuid": "3a53ddd1-fceb-46a2-99d0-c24371943f4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c893865-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774512729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512729, "uuid": "04666459-39ee-4de5-aaad-dc96534cae3f", "comment": "Malware payload (Mirai)", "value": "cb70ae7216ba236a95b42eb2d9e49eab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512729, "uuid": "1204d1bc-6fb2-4ef7-984e-dddc37373f85", "comment": "Malware payload (Mirai)", "value": "b6e16730d6d3ef3922e0a41f3e8c972ea1685baa08263b57c2664883e81a244a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512729, "uuid": "e1379a48-1857-446a-ae02-189686a43989", "value": "T1C4E3E70AAF610FFBEC6BDD7702F90B0229CCB91716A53B797534E818B50A18B59D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512729, "uuid": "6be13710-d8ba-4322-b746-40baf6024c1b", "value": "3072:EtXSnYstme6NBfN81u7pZSBeZK16RxBf:iXo+e6BfN88ZSIlr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774512729, "uuid": "27d5056b-5f7d-4bed-bdd1-d79d30e55fdf", "value": 153848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512729, "uuid": "05b8008a-d42d-40c0-a162-d41304380df5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1f8fae2-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774512792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512792, "uuid": "9412078b-d997-4203-827e-a5d00403ad40", "comment": "Malware payload", "value": "2b508feb160be50b91f113ebbacf9496", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512792, "uuid": "478f09da-8332-4580-86a6-6343a72cbcae", "comment": "Malware payload", "value": "30d8ad6e689836243fec3847b7c08d3c9d01d4197088afeb08fe382cbf3e28ad", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512792, "uuid": "3c57f4b9-0974-4150-9d42-a27df43f3b4d", "value": "T19FD622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512792, "uuid": "d1fa63a4-37fc-4f77-97f7-5bc1728ee1ef", "value": "196608:4Hxcp9ym3nltDUJVAHxcp9ym3dHxcp9ym3xHxcp9ym3wHxcp9ym3gHxcp9ym3mHJ:GGplpjGpPGpjGpeGpOGp0Gpq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774512792, "uuid": "3965542b-cc10-4d36-9604-d8f6334dda7e", "value": 13541376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512792, "uuid": "951850ee-e054-421c-a973-85c1ba1b2f91", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1b67ea2-28ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774514107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774514107, "uuid": "00816172-91c5-47f3-8ee2-84598a6d259a", "comment": "Malware payload", "value": "5a7b1374ac77e8b37c68e13e55b86c9f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774514107, "uuid": "4ba24d56-dda5-48c5-843b-8ea239606f1c", "comment": "Malware payload", "value": "f4cc5b664c93e3a86c9dc6ae5f8b420a69eae19508f37865cb72b2842d1f33db", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774514107, "uuid": "657ffd39-e383-431a-b3cf-8cd395d3a9c4", "value": "T120747C36530BBDDA0B7A1D40E81028218C5CACE7D77145BCFA893ADD65E6640DF6CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774514107, "uuid": "38b44fdc-c6f8-4ea5-8e55-551ce84116a1", "value": "6144:qhnXaoweCTopKz3KuzSdsa1zqiE8S5tLBVxiWROl+qBryFQfhuIQK1PJoIOlgh4k:WKXejKVzMCSgPfTylTJEWpzkI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774514107, "uuid": "1cf773a1-6c1c-4c05-b73f-e8a220f2db2b", "value": 355778, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774514107, "uuid": "16efe125-e3d7-4e9b-8c0b-86fe179b3bc0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cc383a7-28f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774516166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516166, "uuid": "48d5e1c7-d2b3-4216-a435-ccc702fc1059", "comment": "Malware payload", "value": "1a177ede1becaeac82636e0a6a24538b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516166, "uuid": "14b62d79-1be2-455e-95af-6db8b196dd3f", "comment": "Malware payload", "value": "212b4b07da8365e9bc588d548c330ac1a3875e0305e9b84442816bd4b96d961a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516166, "uuid": "87d0991f-0976-4bc5-bdbf-b05cac7540a1", "value": "T1BA34ADDCAB1344AD777E2DFE9874AB54F18437A5CCE080E8F5E238C4F226B5555228", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516166, "uuid": "8001cce3-6ca2-45c4-9b35-44aa69c467cd", "value": "3072:1asUgKOQu07UyPNH8qJQ3S8mprne9/iJ94jyr/Xq+NOoFEucfBZEQQJwZa9iwneb:z/UNdQC8mp76iJ90yrPq+NOCGM5iwn6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774516166, "uuid": "474e3254-1010-42a0-bafc-8bde395573a8", "value": 239689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516166, "uuid": "e4fd20ea-26ac-4c6e-89b3-d63c7a79efc5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f5e90b-28f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774516637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516637, "uuid": "aeddfcad-9776-41b9-9179-c847d84314a6", "comment": "Malware payload (Mirai)", "value": "0479a683c44c1834c6cbaae1cf7a3e29", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516637, "uuid": "e0975153-151a-407e-a75c-0826788ceb84", "comment": "Malware payload (Mirai)", "value": "90fef54846d47250d02c58fca0ab1d70dde5e295b4af8585987f836d0c0fd0af", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516637, "uuid": "82bfdedd-06d5-4958-ba1e-7d8df67038c7", "value": "T1DED35C0673180E17D5A349B02A3F1BE083FED5D021F4BA89691F9B6A8676D3B1485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516637, "uuid": "0d29fada-73b7-4454-8981-002e82a27a19", "value": "3072:CV0zui1ZhMHJ6A+qr4fbOUm3+Q2Mc9FkXn:LP1YO8CbOUmuQ2Mc3kXn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774516637, "uuid": "eb67c200-65a8-44cb-ad36-0549e3eedb8a", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516637, "uuid": "4578acf6-ab9c-4d55-aa04-b006d6b113b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef833d15-28f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload (TrustConnect)", "timestamp": 1774516788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516788, "uuid": "e54e6052-05d1-4960-bb47-3b57394090c2", "comment": "Malware payload (TrustConnect)", "value": "0507b89eeb35741df61eeff7769b3397", "object_relation": "md5", "Tag": [ { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516788, "uuid": "9a461ef5-9b78-451d-a228-7b0608ae79cf", "comment": "Malware payload (TrustConnect)", "value": "5701dabdba685b903a84de6977a9f946accc08acf2111e5d91bc189a83c3faea", "object_relation": "sha256", "Tag": [ { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516788, "uuid": "51b013fe-2c43-436a-973b-53e4cc5b0e9b", "value": "T1D8871256E2FD00E8D5BBC0B8C6575517E7B1341913309BEB66A48A692F37BE0AE3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516788, "uuid": "15d28899-0095-47fa-847d-41d7b1b7b678", "value": "70d2e884fa127843c5bcbb53da86b6c8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516788, "uuid": "c7deb309-3e29-464a-863f-59862e93de47", "value": "393216:vKxapWfkzI/r4SvhZ6sRvI9cR8vq/mQFgeyh0LfHPQu2jYvnUwEbc/81t:z48Gr/vbpvuY7Key+7PJsYPUlb5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774516788, "uuid": "449441d6-6bec-4ab7-9487-980b0e7c780d", "value": 36333184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516788, "uuid": "cb7524ea-52ac-4c9a-8c61-157723f9970f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17a5c189-28fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774519432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519432, "uuid": "672efa99-94a9-4b00-9b8c-f346c3fae50d", "comment": "Malware payload", "value": "27e69438174933ae55249b50bb826f35", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519432, "uuid": "64dd225a-d763-4ca3-9548-97eeb82d50db", "comment": "Malware payload", "value": "1a79484611f4d54ddade6ad3535b98d4c461d5d2d0d585931255516d6e310b45", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519432, "uuid": "51fc4c7f-cf29-49da-a99d-d03a487f2427", "value": "T126B633887F5072F2F3536034D9E60A7E8EE536F26B9280A6E0D55B2ED5983C1133D1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519432, "uuid": "7d7dc9f0-5669-4fda-8375-9babf2cc1060", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519432, "uuid": "e8a5c31d-1202-42d3-9271-38eb441e1e9f", "value": "196608:RQeh0azPCkeUGon6cxw7qQ6eQxT42XRib7cKzdDbanABGr86oDDAItMEdmQ:X2az6D1cxRLxT45Aq9ensGr6vxdmQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774519432, "uuid": "5e3ac19a-45ad-4844-be98-80d93b48edc2", "value": 11398656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519432, "uuid": "43f301e1-ca8b-47f9-93e3-5a4f30175e54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bb879b2-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774519895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519895, "uuid": "c3d269e8-99a0-4a1b-be9d-3178312118ed", "comment": "Malware payload", "value": "a221fcc144a044062c55dce396564355", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519895, "uuid": "e5394b77-2e27-4b25-9e88-cb0c062be649", "comment": "Malware payload", "value": "053b359334d1a86c170d1e0f104e7f3bc1473aeca91be6d86e20a5fabcfa2106", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519895, "uuid": "b2063eda-f5a2-42b8-8371-fc126679d349", "value": "T1BC955A0BBCA418E6D46A93358CB726927B35FC590B3223D72E50B67C2E72BE49D353", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519895, "uuid": "d5d4e3d0-09fd-4f9c-bb5d-21be001077bc", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519895, "uuid": "9520f5ec-92e1-4241-bd69-7be1fa044bed", "value": "24576:7/JtFyDi2C4DqkXpbsApH9QuXl7gPGoUuD4S4igppIa/rtP9G+Wob:7/JtQDi2C4n5bxQQlBuMS3gpaa/++7b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774519895, "uuid": "3ec2577b-6ac3-44cb-8154-f81c26edfaa4", "value": 1941144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519895, "uuid": "9b67192b-eb70-40ae-bd4d-48147fe2d612", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47ee5179-2914-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774536308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536308, "uuid": "52d86d35-c3ff-4f95-b158-b32edee567ec", "comment": "Malware payload", "value": "da5602384c965f62f198d849caa8a7b0", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536308, "uuid": "3c603b62-f5a2-49c5-8ef1-5e76374159a4", "comment": "Malware payload", "value": "69df8847cabe02123eab3c6a1b59afdfac69f18ed532dfce9e6bac86d9513778", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536308, "uuid": "20dc81ff-eba7-482d-a80c-dcfe74fd8e71", "value": "T18F364B0BFDA218A4C8AA913085779357BA717C051F7263DB2AB0F7741F327D05AB6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536308, "uuid": "b3581772-4165-4d13-8980-54c6caa3ed9e", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536308, "uuid": "a7dcaa13-6c30-4067-b032-0bcf330ce4e9", "value": "49152:JVrl7pbmytgpI7Cn7GmBW3MVVakRrzrJEJUHij2mvXzLQcib+kjVc:JVWg8GCrzylbkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774536308, "uuid": "855c17b6-f094-4af7-ae17-6f6bcc9b2b63", "value": 5263872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536308, "uuid": "33330db0-8f6d-4960-a2a2-52ba24e968ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf1712b9-2924-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774537322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537322, "uuid": "6dd43ed9-35d5-4852-aaf8-fa85ce6bad55", "comment": "Malware payload", "value": "d534a8cdd1a9e7741946f7863974e87e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537322, "uuid": "62d614e9-e617-4595-a273-4597363a1f35", "comment": "Malware payload", "value": "9b2217e1b187636ca2dec31ee75c43d9c9bd13487650d0570b7ba4e0c894d214", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537322, "uuid": "6747afff-1119-4470-bb7c-ef324def2a46", "value": "T154931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537322, "uuid": "a902f473-0414-4858-9f66-cb3d56046202", "value": "1536:9Byp1tF/uwMmAIa14oXI6I1epeV7tb73WdxCrCitkb5fv2v05xDer5if+sCZK86x:984IO0GitkbFv2v05xDero+sCZn6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774537322, "uuid": "5295a27e-dd9d-4b9c-84da-6abe950301be", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537322, "uuid": "5b05c3ab-f369-4a22-8d8a-f5a1fdbd88d6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "150726ed-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539133, "uuid": "c5a6d87b-90b4-4b0a-b2e9-aad93c803ebe", "comment": "Malware payload", "value": "06cd76294640c8ac5b60739a614705f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539133, "uuid": "defa867c-de60-4863-8244-5bad1d3fb3f9", "comment": "Malware payload", "value": "66bb14c4e373255d5301ccb1c3bb29e3d99ea94c52383be0c766ac3fbc58cf22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539133, "uuid": "771903a4-39c2-4881-ad0b-a7802bee8990", "value": "T19FE39D0BBB910CFBC491C53245CE5A3576B3F07653212B6F76CCAA301B066645F68B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539133, "uuid": "33f12f80-fa17-4f11-b053-7f80592bbcfd", "value": "3072:bbu07WZ6B8+cv6P43/OwndTTOoGdrjqgmex4phaFnu5chpym6+82cMkMzjaoH:bPWcP4tnd2Rdrmgv6zagmxPcMD35", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539133, "uuid": "827c17c5-1249-4318-a690-f26ace87a97f", "value": 156664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539133, "uuid": "f5c4b818-6c05-49e0-b572-24ef20f43350", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539133, "uuid": "8df542b0-c17a-4998-9502-c984d5bf4258", "value": "t138016843466d196f3cd2d935c4682a9f1373aa328eac95103fd8c54dc54236e9228c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "c0aef721-9b16-4bc4-997c-381df63c31ae", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "28ab2254-7e68-4cfe-9ca9-b89d0eb8284a", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "a39d5dcc-d9d8-4b9b-9825-04dabc37d448", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "42458dd8-a8e4-416e-8280-783dea3d9d52", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539134, "uuid": "d3bb306a-263c-4a2e-8bc0-a555d0176d95", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "3f108543-c7ce-429d-8684-9e433561942a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f714bb48-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "2ca276ad-2c20-4d46-8602-b52d252cb110", "comment": "Malware payload (Mirai)", "value": "8227da0966d22df72a9933851855e288", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "7e2ba212-4b34-4205-b137-3d39811d1920", "comment": "Malware payload (Mirai)", "value": "94234c40137032359b856140b970d2120a8acb50d64e2d5cbb4779b5ca7413da", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "b0e49312-d5fe-4724-b99a-88ce1e0ed0e9", "value": "T16C932982BC419A11C6C517B7FA2F108D330267ADE2EE7252CD141FA47BCB91F0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "b81d06a4-8898-49db-881c-f67b6f00ac86", "value": "1536:UtnQY3ubX7o6PUQgXD4VAy58vWMj5LCqTQ1uxXJ70qpdgYgUzIIIiHib/mMn8:VY3y7X8Q6siy5eWKZjZYqpigib/mM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539134, "uuid": "3f59a42b-8700-445b-9ee7-4cf9b1d2db02", "value": 95536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "6a2c7c50-5b44-4db2-8ee3-bba33029cf42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f73bd3ef-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "b787c330-c5c0-46e1-b2da-16173f73d8e9", "comment": "Malware payload (Mirai)", "value": "dd7b326716759fb466b71a3875c93c35", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "5d1b8c23-cd4b-4f70-8dfd-9093f7332cd6", "comment": "Malware payload (Mirai)", "value": "1ac41c59155b3e13a8af681ba363b5968162195aeec2c10ea5fae43a9f4c02fb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "08f9e54a-edbd-4f85-8a5c-768e29beddd0", "value": "T103734A99A8014FBCF98BD9F981110F0DF42172558B930F27A36BFED37DA20959E06D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "f57c7707-e73f-4c12-a6a7-9a973871c92c", "value": "1536:17UNcqKY1EJwIHJWPkadTMXf1ZbrOngRqjWaC1tRp1n8v9Qf4:w1EOIHJWPkadTaf15rKgkitR/8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539134, "uuid": "4f2e2279-57ec-44b4-9150-1fae43f9affe", "value": 79172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "88aecbb8-33aa-4599-9a7c-e91f84ec3c29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f73c452e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "a9e93b8e-d28b-4de4-85ad-c47c952acb07", "comment": "Malware payload (Mirai)", "value": "82a76524982c1daf34ed28ec8970f919", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "4ceb0137-f12a-48a0-810f-e082b2daa7e0", "comment": "Malware payload (Mirai)", "value": "e65da4625748cb6612837f05e19d3a998fac626075f1c15dd5a945421b85ac90", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "ce49f4ae-f036-4123-a5e2-a6eca014cf23", "value": "T196739E73C1786DA0D0408A7079A89AB447437504A2A73EB1EA82CF595417EECF71B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "7cc64f28-6c48-4f56-bf76-08c521eb4182", "value": "1536:q/iCjXsaQoUE+GTayESGbwZU0b8Yj2Cd0i:q6C4YUExYS0+3b8Yj2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539134, "uuid": "e11193bf-f6c8-4bb5-9d94-a009c6131613", "value": 75796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539134, "uuid": "28b8fbdc-a5cc-471b-b60d-2a5849c5e317", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f76bb2ef-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "685afb85-b0e0-4b35-8b3b-c9c42c77e41a", "comment": "Malware payload (Mirai)", "value": "0f8b36bde220c61db5ffd683d79b5c70", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "59ab252a-15c9-4640-95e3-0a8734b4e36b", "comment": "Malware payload (Mirai)", "value": "8c415a0b9279fc7a5cb72c0fddfe0be53d9da8c092edd55479b8b04ac468f553", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "75fcaf86-a2dd-4472-98d8-ff05236d5d04", "value": "T11B734A0137588F47E8A64AF8283F17D483BEEE8021F5F584690FA75A4235F33595AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "284040b4-3032-436e-86c9-b57de26a18f8", "value": "1536:PHZhE7Db3z9//sF+Q+Oa7hpIGjoeyXbgZ:PH0lSmvIbez", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "c598a73f-08db-482c-97fb-a7a983d48533", "value": 78944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "1c0f5eed-d46d-48c9-a33c-9b01f7246e28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f785c51f-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "dc04f4c0-7986-4dec-ad66-8ae4d64e8863", "comment": "Malware payload (Mirai)", "value": "d3029e9e28bc36913d4223dba3a1e788", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "35d19dfe-227d-4e61-9883-07bce223d0e0", "comment": "Malware payload (Mirai)", "value": "205c5c526bf121543297c619245d43c983a34626cd96c7100525fbce6b4867ba", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "9dbfb389-0234-4a2a-a2a6-bb8e7866e165", "value": "T15C83197A2541F26CEAF680B4F45339E624120A083FDDD1E36883143AFF75B48B16DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "fb15a4ff-4e34-4b23-929e-f91ce8197de9", "value": "1536:LCv0PLlXJBOJhNeK0T3VBIVCCfy0K9ISGYP:I0PLlghAlZu8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "7ba5f6ef-35b5-408a-83ac-8d8be31b84ff", "value": 83328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "98b7a205-517a-4e15-a2f4-b6a36ea4e4b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7a0e5db-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "6e48e240-66c6-49fe-8039-31e2534280aa", "comment": "Malware payload (Mirai)", "value": "7c48058879057bdd6ebbe6ea80eccbd7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "e73fd3a7-fc40-4557-8bc9-39c9b9ce494e", "comment": "Malware payload (Mirai)", "value": "ab92589347b1cb5262aef0b60976352968e012223132d0878d1596fd59acd2e7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "ec4467d8-374a-42ee-abaf-9f187eb0f499", "value": "T157731982BC40EA2AC7D0137BEE6F109E3311A7DDD1DA3246DC155BA47A8E90F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "f8f15401-eb54-4741-988b-28f50bb31d48", "value": "1536:vv+bfqPIbTESHQUlNLwti5VZm+tA+B8t46WHjp0xsn:vWbfqiN0+ue849HmQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "c3876b2e-98db-4744-9855-f201f94b495c", "value": 75316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "aa74bbd6-c47a-419e-9277-85baaaab5956", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7a40f85-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "c46897c0-988b-4b5d-ab95-df0f004c154b", "comment": "Malware payload (Mirai)", "value": "558bdb2527b36aa6ae77d26d2f267b81", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "3d965e50-4cca-4825-9fbc-ceb1bf933250", "comment": "Malware payload (Mirai)", "value": "919f83adf548667693bf9056dd14555fcc64b7a855ed4bc1fae0712be2aedc20", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "6bc36341-8991-4cd9-b574-03af176ad219", "value": "T128F34C86EA408A13C5C61776FAAF014D3322E755E3EB73068D185FF43F86A5E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "95d47de6-4a31-4ab1-8bb4-ee44bd4e0719", "value": "3072:vnlZbzxS2VMHoaAlvO0YqpSsjS2n6XQIvIk6tfi9XM/9Pyz/hLCK8z:vjhS2JaAlxnS2n6XQeIvfitM/9Q/hn8z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "c80d4719-ab6e-4d00-b026-4693fdb634f8", "value": 159286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "88fe5f91-eece-46bf-a20d-20f73157cebf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7a4c578-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "e26b46f8-28af-4723-a8c2-18e52d2e5ec2", "comment": "Malware payload (Mirai)", "value": "ddc5a31b22ff8064abc1929b6bf52fe2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "6e0e71f1-cb84-481d-9fc6-d4062366d067", "comment": "Malware payload (Mirai)", "value": "1a675737eab617a53c0eea787c995662598d1457ce99efbe306b7d8d28e4d372", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "0769e79b-e9e2-49a6-b2a0-c8fd2330fa35", "value": "T151734AC9A9C3E9F5EC0509783077ABB29977F53F6029EDD7E7E85563A840A02D0023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "17bbba36-937f-49c6-867a-fbc9fc6513bd", "value": "1536:2mw+1QhcF4SwoToJEqK0V8uEesmB4nWUnbNpM2gG81Xts7cx18Hw7PWs13eH5WDJ:Pw+1QhcF4SwoToJEqK0VHoAYWUnTM2z3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "b99458d9-53dd-4507-8e88-64a8bc53a2ce", "value": 75376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "2189ba80-4c58-47c4-9cd1-889f045e41ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7b2954c-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "d5d2d0a0-2401-4653-bc2a-e012eeed6703", "comment": "Malware payload (Mirai)", "value": "85dd0e7b2cd4e5494da0807d195ce803", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "86838d02-36d6-4b8b-a5d2-054ff8c06680", "comment": "Malware payload (Mirai)", "value": "ba14f0deb074738b8e93d2beed1f72ee65d54f2f41a3b78e7777e0e2e50ab00e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "8f1bfa45-f74e-4edd-a216-ad3c39e983d0", "value": "T117B3A41ABF605EF7E8AFDC3749991B8624CD541A20987B79BD30D818F60B24F15E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "aa98bebf-b591-48e1-ae4c-29ecb971c1ff", "value": "1536:qQN6C5SoIbbOZR6UErcfSxtTdHjAyYdFr2sK35iGUqvC5YA1NetMZWglCvhTo:q46C5ZIbb3HjAnFi35iBytMB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "243b8805-e19f-4382-b285-31ea066f314a", "value": 108708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "82c9ff00-13d4-4eb8-8e75-961b6d37d828", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7d58de7-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "531cdc98-8deb-4812-9a19-4e7ed1023927", "comment": "Malware payload (Mirai)", "value": "8b8c2739ae7c5c7ffb1e92f8835b3dcd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "4ce999d4-c7de-499b-ab67-fb206c12db29", "comment": "Malware payload (Mirai)", "value": "e06a96e238b0c2c4a72bde8f3f7cd8920fcbb539ae760c110740d8a6c1232c1b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "89a23a45-c2ab-4c06-9a00-0331ac183136", "value": "T1AAB3834E6E219F7DFBAD823887B79F20924833D526A1C5C4D0ACED025E7434A741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "0e6f680f-4245-4abc-81d6-3bbe1a33f356", "value": "1536:pNlVQIlaacLJylJl/y1HDo2ekbmxGvxzfj/rvWmExyc/pHjSKKsh3FBP:TPQIla/Jylry1jo23y6fj/rvJmyFn6r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "823e0546-87d7-4bfa-844f-e3ce2730ef1c", "value": 108708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "1eb29f10-f01e-4262-8ccc-d73d895a654a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7dd366f-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "696646ee-58d6-47f8-abdc-df52a951d97b", "comment": "Malware payload (Mirai)", "value": "dc1225eaa077ab7039c0c39e7f0bf2ea", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "bc74e6fe-8dc7-4b48-b83f-c181923ca060", "comment": "Malware payload (Mirai)", "value": "625e2ef515c656e7cb5ec6440df58e8e545b55dada1934b24d3c8ae3e767253b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "234cdb63-0f2f-4c14-9a11-f87eff19aff7", "value": "T1EB830782BC40E616CBC01677FA6F108E331567D8E1EA32069D251FA47ACED1F0D6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "c839dcfe-8132-46b3-81fc-80d28bf50323", "value": "1536:7oMlnQ8Pwgszvfy3o0WBxizy/uk5eJI1HBMXB8t46YTnbwJPXcs:UMhPwg3WzLl1CR84vTbwJv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539135, "uuid": "a3013ee0-4d11-4118-9c31-f1c8dba445a4", "value": 84100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539135, "uuid": "4838e0e1-ab12-4053-87f2-604d204bf5af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8aa962c-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539137, "uuid": "0d61b066-43b4-405b-92b2-81a54fbad34f", "comment": "Malware payload", "value": "2feaa89101045abb826c9761b0d5cd35", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539137, "uuid": "3e4c4181-ed22-45ca-97b4-9702894e131e", "comment": "Malware payload", "value": "d5f1c3e2e3477d9f3c630c315ca508f8458fa3ee33d7e6e40383626b8e9161e3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539137, "uuid": "f8149f90-f3af-4a1d-833e-cec65ce71877", "value": "T1B0A533C2C0E9095AD343D334B7C5F6B269FB4B646E9510C717C06D7A60B12EABA10D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539137, "uuid": "295069e8-0e6f-44bd-b4f5-17be21076de2", "value": "099c0646ea7282d232219f8807883be0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539137, "uuid": "71607cb3-be06-4ab9-8430-2ec25c643453", "value": "24576:KNFuyA0n1tXAwFGZOEWcJrHvi/aaBOSd/MugwtUvih6IiuTiF3BMS3QpNvLz4Sfe:nubJcOrzZxgwOid6RMIONvLz4Sflvtqn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539137, "uuid": "cc18bf5c-1f36-4533-bd88-36ea436bfbdb", "value": 2219240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539137, "uuid": "5b98f4cc-3ca7-41f9-b3df-1a5588158f27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd978957-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539145, "uuid": "2261f1a1-2416-4e57-b239-a0281d300a60", "comment": "Malware payload", "value": "10b1dea3f6e6e8bbe812e9f6f17746d2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539145, "uuid": "51247842-70c3-44d8-95d6-5b4f387841b1", "comment": "Malware payload", "value": "3b0b03c69c4f25b61ecec81b045183a55b7f13ef827f21fae453f32944c0a61d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539145, "uuid": "237e1be4-fff3-4456-8cf0-d1644a53503a", "value": "T18B8308327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539145, "uuid": "2de16f23-c4f7-446d-ab5f-3eef67eb16bc", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnsWaWVN/:XEKltp9txAX/yr2pbsWHVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539145, "uuid": "3a09840f-289f-44e4-b3f3-ddd7104884dc", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539145, "uuid": "c6bca52f-354d-4506-8f14-19f77f0b19c4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "193fd136-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539191, "uuid": "55cd8664-1500-483a-b69f-385bb94a61c5", "comment": "Malware payload (Mirai)", "value": "3cdd356e861ed6e1e04a856ed04d5d0a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539191, "uuid": "d408ff19-f1aa-47e5-9928-5d013d7db240", "comment": "Malware payload (Mirai)", "value": "dac97431b838b539541483810b4f5198e41d5cc023b24f3450ed78f06acdd38a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539191, "uuid": "049a2755-101a-4140-946d-e4000059b27f", "value": "T17703F17C05EBEA51F6912C3AEF6B4189414329FCC19623B013CC4E923AA699F127D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539191, "uuid": "c815c014-e34b-4bc5-a22e-62f8e8660e20", "value": "768:vasQckK23h5zhf9VqmddPUADGeTssakNhIpLAWGKmznYwtIlypf2s3Uoz1:vasbk75F1cmPlGO3NmpLAWgzgaz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539191, "uuid": "36b697d3-5290-40e7-8400-f134ab1d6946", "value": 41412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539191, "uuid": "4c53dc1b-b2f5-4d4c-9431-4fd9cd24175c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1941b5a1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539191, "uuid": "32421bea-329f-43b4-8f05-7987f25e0e87", "comment": "Malware payload (Mirai)", "value": "1a544b6be3a23f22c700a6ebc648ecb0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539191, "uuid": "11372f1a-b9b1-48fa-a44e-b27b959e4d80", "comment": "Malware payload (Mirai)", "value": "22c7d953ad51e99a89c3a0ce2b7a1c28135444a0b48f2e6fd00d6654797eec67", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539191, "uuid": "bf0b0656-3020-49f5-90b0-19efcbf333b4", "value": "T157A33A37BB130A23C0CA547212E30731BBB5D3D928FA5247BAA16DEC6F166803566F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539191, "uuid": "ce571c1c-5f75-4ed5-a804-9566fb0308ef", "value": "1536:xfRuqNM5h7t/RiRt4nJphaQoRKzO6F6OXj6ufeRTe:OqN8jRiR+phaQoRKzO6F6OXGufcTe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539191, "uuid": "1348a255-5f73-4c7f-9fb5-ac3064bdd059", "value": 102442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539191, "uuid": "ca450f6a-361e-4ea8-a3d6-a9670d87d76c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194daf71-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "ccbe64c3-d3c6-4b95-9456-b4c5b3c6503e", "comment": "Malware payload (Mirai)", "value": "12be9a6f83d28294ff393a57ecbff482", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "d1217d6f-523c-43f6-a08a-368e8bcb8d3b", "comment": "Malware payload (Mirai)", "value": "22cfb3ebb07d7c0e80a49ffa8071b1553a279a2698c44174177cbf86e5c523b8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "d4588238-c364-4dc3-81ef-d28d5701472d", "value": "T18A933B07B71C4F43C1DB59F029BB2BF15769B9E112A36181B91BAEC05B33AB81523F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "cf2b15a6-2f8d-4623-a2bb-7a335830d597", "value": "1536:T3oCu/OcwUBvPsTbwHH3P6zMSIHsiO6aRv/lz5/5hLg6wOFO6V6qDjjofSee:T43/qUBvPs6X03IHsi2/b5hL7wOFO6Vt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "1ece692f-36c7-47ae-9693-4ecf89e11d17", "value": 92720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "c08b1372-edb0-4553-8bef-f96bb8712f2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194e0052-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "b53e4864-07fe-475a-80a1-64e59e3d9f65", "comment": "Malware payload (Mirai)", "value": "3a44daf34dff5ed1a244dbc22ad5843c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "15607194-ed83-48a0-abf7-a22d4f6bce5c", "comment": "Malware payload (Mirai)", "value": "762fa88e6e5d2ec4f69f5cf76a1a0cc35a89ae344f970b91ad7e2db2d4b0301b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "901bd77f-2d2e-4735-b4f5-edc29782fc79", "value": "T1BC13F10FE4DDCE49E375A3B116FCA38D4126E41FE5845AE919416CE66C826193B2C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "195628be-d356-4493-a9df-4181d3595333", "value": "768:ZEe/jPvbiNADOZ5aZxa2sC8Fh7oxvjReJu8u9SKi8qsK5z4S1MSi/P4Y7nbcuyDt:2e/TbiiDua3sC2gjReM86dqsK5kUM/PQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "739983af-dff5-4e79-a960-b71e256c4551", "value": 42232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "040813d7-9e32-40de-a2ff-0c29cda942ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194e9eb7-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "3878b923-53d5-4f17-88d3-11265aee5f5d", "comment": "Malware payload (Mirai)", "value": "45815478da6ef7f8b8c13cc198205601", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "800a5956-dee5-42e3-9708-d8f93c135870", "comment": "Malware payload (Mirai)", "value": "7a1d5b337271a2b8196dd1093fc3a680971894c80af13546207b5a389cdfc919", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "d83ffafd-6713-4a1b-bd7e-ac08b2540245", "value": "T1FEB2D0300B9AF9D8E3305977BCF9854FB6A001BDFAFB35E1013146CA54854B7927AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "5ab3ee5b-d284-4c8e-a198-a8228cef70ef", "value": "768:WZDNHOCEYr7KUjziiNBRi0UgupUB1is3UozI:WxN/SUy0duwNzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "6fd413c7-5887-45cf-be1b-6e5f8de09789", "value": 24828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "3c0f34f9-1e03-4b6d-9dc0-176527ea2eb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194fa7d3-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "51607bdd-4d42-4b6e-9c84-7b6dd89b4f48", "comment": "Malware payload (Mirai)", "value": "729c679564203c17499ac371ceeb54b2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "a61b2442-bfce-496e-be87-0b7236716cb5", "comment": "Malware payload (Mirai)", "value": "c0065e1f87d4226bf56c9c304634bf523b6bc3d87e840d555e1a61f887520fae", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "c93a22f5-c337-48e1-8553-2fec5f1081e4", "value": "T103630100B0B3ED7A193923348D45C6865B1D4FFCC259B4BB05274E48BAC095BBF5FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "09993041-5250-4d73-84f9-449e751c93fd", "value": "1536:52qzVI77BnOo1trI1j1sPBR/PD0ojE6c8QRLb+F2UE3h7:gqcF1Ejw3rE9BLcE3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "0d137993-7936-4638-90bd-0b39debddab7", "value": 68312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "210b5b60-db1e-4052-ac11-c57eaaa2998f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "194fb77e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "e8f5c271-8621-4aeb-bf0f-5659c3d85c2a", "comment": "Malware payload (Mirai)", "value": "fe73207e3573a1f301a392cb23ebbb17", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "1503ea4b-a837-42d0-818b-4d8bfec9f548", "comment": "Malware payload (Mirai)", "value": "1f4f48999efa9c16d3c15cb63ade3eddfde7482ca5b4daad32ef5b32c3f854e5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "a760d263-03ac-46d5-abbc-a01207be8857", "value": "T13613F11AD129AD70C9B1AC3FB890C1D269A52274D37CB423A54962F80DE37131EBF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "6be61ce1-7c24-4bc2-8034-75ba1ba38060", "value": "768:W8kcLQ0BXX8E5INBuxG7Hwj+D1iG2XACAZXwlbTH82Jl9q3UELBb:jkcLvXXdIHYG7Hwj01sAdwlbTH82CLN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "66883e18-8e75-4b7f-8021-79277952cb13", "value": 45536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "3ecfbc89-a662-4d82-9a2b-789338a399f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19567d0e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "12940e44-089e-4472-8464-6f5e5c8701a2", "comment": "Malware payload (Gafgyt)", "value": "2dc58207046ff545c656a7170d770520", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "fbe5ea32-38f3-444b-8a8a-af781548507f", "comment": "Malware payload (Gafgyt)", "value": "4fefaf7ca9ff7e64ff8fdca5e28d21b567ccf7664307d74b8344c58cf49a1507", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "38bcc249-9e9c-4cd2-94fb-d23ecf00437d", "value": "T142934C06F8419753C1C327B6B7CF47093B3667B957EB330266386FB02BC67991A25A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "794807b9-84d3-4619-8126-1a76a6c978c7", "value": "1536:ZvgGLI1gX3JGQxPuwjxtOZyu5hXNKV6T/Fo2kjvVqQEqn/lJXCPe:tIHQjjy5hXNKV6T/cjvVqQEqn9JXCPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "78aba642-21c8-45d3-a084-7f606f500d67", "value": 96620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "55452588-5c15-45fe-96a0-88cabe8d0663", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1959da3f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "adf420b6-0023-4b2d-bc6a-579f890962be", "comment": "Malware payload (Mirai)", "value": "95837a324c77e10822b6e03dd5b8f67a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "31f1558f-6c30-4da8-8150-0a422ce15d58", "comment": "Malware payload (Mirai)", "value": "6465c08f3b2e7067174ca213a95faff2cb8fbc318576c2b07c3f888837636aca", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "5c2c1044-acd7-4ceb-9c29-60b68fe9f034", "value": "T1BD03F123969D871EE95A607A80EFF24B3658DFF8D21D5972AED0601118B7F243D207", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "5157d2cf-7bf4-46e8-bdea-8b8be967ef82", "value": "768:zxyPlE968yonzSM61q7bIFU3D1scBSWx1CA0/uoKpjv7qLnbcuyD7UHQRjJt:1yP6YqzSM6U7bI+R/SeKj0T4nouy8HyX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "1eb8519a-8a2c-4a53-baa4-d0d291334049", "value": 40128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "3b1cc812-79b7-4285-9e1c-c313c90dceca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "195e1d7f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "8b140554-87b6-475c-982a-4b1f26e9aad7", "comment": "Malware payload (Mirai)", "value": "84db85268dab8e75c1304b0c4bd81d26", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "c33f3555-36e3-46cf-bbfc-c52d1b055abe", "comment": "Malware payload (Mirai)", "value": "5d2c15e97c79dae238a2cbc3c115a25e6500c6092684eb6a4c04110dd689d850", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "7cd5199f-a2d7-467c-acfd-81d36290fc8e", "value": "T12FA33A22FA32481BC5C8647621E74721F6F6436B64A8D61BBE610D8CBF55A04226BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "ac6f8550-525b-4baa-9f35-b9ed439917b5", "value": "1536:dGQwOyavKQBfOsgtdPlYlRqoM5djt/tk3bZxqHN2DsDGKLbDa:8QwaZB2difqo8d5fHNQ4be", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "6a35a173-4bc2-4d7b-991a-2dc079287edd", "value": 99592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "490ead10-b2d1-4fad-a0bb-86472b8de86b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19652085-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "c3aa0c03-ab70-467e-901d-4804cf7b55d6", "comment": "Malware payload (Mirai)", "value": "bbe4880e3f881b40eb913d7b13bc51f8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "a32d9a32-81b1-4e2b-b931-2a4d55c7d727", "comment": "Malware payload (Mirai)", "value": "bdf63e54688c61057bb3dd4197da95aa0b46616fcfcc7b044e69234454ffacba", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "f90a33da-750d-498e-9799-85541078e0ee", "value": "T16613F174C2141DA6E808FD90CFC657D99B883E6A4372C58303E9AFA7584343EEA74C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "3a9a80d2-b2f8-4cae-a58c-dcd4d101c060", "value": "768:acp+QHi04acqVgUp1uxMQKThWU5hyqyM2AOV+F44Ht3PX1U07SySHoHSGOk4uVcT:a2+QCsc8g+1uxdgAU5vy5z+HtOxyMGO3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "dddf2572-ff92-493b-8803-5130f4aa3784", "value": 41588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "57e20276-c3dd-400c-abe5-a5a8626e6811", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1966a0e8-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "707dfd36-3f42-479b-bd11-f3453f3d1ffb", "comment": "Malware payload (Gafgyt)", "value": "e38e75c18ddabf4dcd0c95d13e1e5b74", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "2c1b7994-46f4-4c9b-b0fc-24a7a36d5085", "comment": "Malware payload (Gafgyt)", "value": "c22060ef910be1c39d1a323ac42130276ff0a032d600e4fe7d2abf901cc4a0dc", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "03eb19d7-2e08-4ea6-a256-9e6a5fbc62cc", "value": "T102E34B09F6408B53C0D32776B68F534537239BA5A3DB33069928AFF43FC27A94E229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "22c5e75b-e778-4430-abfc-c82a1d04cce1", "value": "3072:tdntU2haO5H1XacBoGmh9H565hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9HY5hDiGRcM/9l+7m5wS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "6ce6e218-d645-405a-82dc-310337d71af4", "value": 156296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "9fd9a894-93bd-4b3a-a9d1-54b0407997a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19675d4a-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "3e346141-bfb6-4ab6-9c92-457904adda24", "comment": "Malware payload (Gafgyt)", "value": "fcfeecae92cd9a6b51d9abd8af355f37", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "b467edb4-a507-4699-8b60-25c7fd3b35d7", "comment": "Malware payload (Gafgyt)", "value": "4cffe5f1186142856ac813b590efd372110e7bae4c9337cd9d2ab510ccd24433", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "c7a324e5-3486-4caf-91d8-8ac6a7ae055c", "value": "T163C33B06F5108753C1C2177AB79F561A77232BF897DB3312A6247FB82BC279A0E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "3a067143-4280-47da-a1cb-8900ff2d631e", "value": "3072:idwracAAviNmLpMQ1xm5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxm5hKHKnlAdmyDQUJ1a4Tn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "6a80acb8-50d7-4b2c-ada1-e94401f6c831", "value": 118932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "6e72f0e0-d56c-48c3-944e-6d5412e056f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19754354-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "937d9a40-e0d4-46b8-8a44-271ba7da5302", "comment": "Malware payload (Mirai)", "value": "40779ab5dec51fa2395261e81aa00c3c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "85974dd4-c6aa-499e-81f7-813f308ab60e", "comment": "Malware payload (Mirai)", "value": "f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "7bea4a85-eedb-461a-bbff-7cffc9622b11", "value": "T166414F4B73EBB731EEA2E972B494242023C6D185D4ED5F0CF6D835DDD0ADCA0636A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "4830f3b5-9fd1-4f18-933d-8a1b1927d6cb", "value": "48:uGfgNC/bKzAvNj4tCZ6Lc5yJSTERd41B1A1V1a1RIBaXMRwFqBgVfvYNI:uGfgNC/uzAvNj4tCZ6Lc5yJSTERm1B1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "fd3eaaaf-bdeb-4a30-97cc-d7b1caee9cd3", "value": 2017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "941a5464-e675-40fb-ae7f-35aee2c4fc59", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19764cea-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "e7eb9592-c3ce-4059-bd1d-343e06864175", "comment": "Malware payload", "value": "ac5e0793ecb2e43c4e6d1892211a63f4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "9119909b-f912-4867-8608-eb03334c1c91", "comment": "Malware payload", "value": "61d7dd427127c2af0d07f4d3c684464ef3ae5ebee78acdf8804eb47d11e46eef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "eb755448-001b-4aa4-9772-ddc51fefa4fa", "value": "T135A34A97F400DDBEF80DC67380274905B534A7AA0F921A63B35BBC67AC76099593AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "deb917a6-b458-4203-8480-b85fd4ff4b26", "value": "1536:WQLHuITKFTRpLU70MfI/0BbxH8sNyS8ooa1ZLicKZnD8yKGUIoNVLUeknF87MAc+:dehyfIQbxZyS8ooQi91ALfUevFYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539192, "uuid": "98598433-83d3-428f-b0a7-32f4cb42d317", "value": 100840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539192, "uuid": "a1ff0b79-5010-43d1-b97d-17a7a24b6fb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1edc7626-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "fd9c8106-d43a-4430-95f8-7fe108dae845", "comment": "Malware payload", "value": "b5d2d23118f60dade41c8ff146fa5844", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "4ab94585-718b-43c1-9e0f-0ad69501cf03", "comment": "Malware payload", "value": "c7bfb17bdac05db7436a80192bc8b81de388749665ce5081066763c85c540b40", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "bf8dabe0-0d8f-47ff-b968-4db6b075b28c", "value": "T19B0633213EFC87F5D7A02130C25C17F488B19B899D2E1C6BA344DB4E7EBDE895066B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "9c81615e-687b-4d44-9d5a-2583a00f6eee", "value": "32569d67dc210c5cb9a759b08da2bdb3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "f64312d1-8301-4fda-97d6-9dd924bb8020", "value": "98304:x4N0EfhzdJUOmdETcBEKUI0ZX1CuXCGm1z8y1:x4NRfhzDAdETcQIA1CuXrE8E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "436b8c97-0ee7-480f-846b-38b94e2ca8ad", "value": 3769997, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "202de3bb-70e8-42e6-ba37-cb5cd1b279ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ee45bc1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "fbbbac3a-7faf-43fb-a948-f8b51cee841f", "comment": "Malware payload (Gafgyt)", "value": "f3e0d5e30072ee17c432c2a6d9e85b2c", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "3aafcae4-72f5-4f17-8500-512bc8f86a93", "comment": "Malware payload (Gafgyt)", "value": "fef62e55e45b89edb1777d824404e232168724d190bad326f1164c59c94e4366", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "01669906-f55e-4be7-a7da-7cbb7ee66a90", "value": "T1B613F24DC65271AECEBD8EBCD2DB2B319D127020319E6758C3164CC9EDBD14EB8A61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "b6908b88-1c4a-405f-97bd-37b0fe83179c", "value": "768:jnJrzMCetuIo9LTgmBi16vGUmkJhPwC+Ut/rJa6SPQNXAcJ05Q9Gb9eWLteidrXL:LhetuIuXgwimG/kPwdUhta6+QNXAcGMy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "8e7b9fd0-7c5f-4522-a7af-9def265d40cc", "value": 45540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "f2e5aeba-6bd7-4c35-b1cc-103686c4f90b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ef9f141-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "ad9c5307-6dbc-4b2c-8759-fe4b3d999ce9", "comment": "Malware payload (Gafgyt)", "value": "67b3df269508a16fda9fde68e7c2659d", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "3afc60c6-dd19-42c6-9654-d38d223dcb26", "comment": "Malware payload (Gafgyt)", "value": "db3a5a7395cb542bea52801fd4b817d80b018b639cfc5d46034f495e5cfa270d", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "c9f0f69f-c106-48b0-be09-a3baacd4660f", "value": "T16BA32A05F9118757C1C327B6F78F47493B3167B997DB33026A34BEB02BC27991A2AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "67db8bf6-a24a-4795-87cf-5345f02cad4e", "value": "3072:7e9h9oZU5hvFfKufS2faYj0+rQ0Knm4XATe:y9wZU5hNfKfpYj0+rQ0Knm4XATe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "7a5795eb-9eed-464a-857f-9d42c4886a48", "value": 103862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "08036a3d-3047-4d8f-8f1e-9e0b63cea2cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1efbe8a7-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "94c889e7-16f1-4067-8070-00df51a8c805", "comment": "Malware payload (Mirai)", "value": "baa906a716c50dde6cca9ce550730083", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "838ddea0-2526-42d6-899b-f373569acd6d", "comment": "Malware payload (Mirai)", "value": "dee3fa0d82ec594146d7df9b7b6592e1938c4c39231951c372de50785c4c153f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "241c4710-49ba-4df1-b100-f88c00b093b4", "value": "T186B3D86A7921AFFEE06883310BF7AF20C7D521D626915386F15CE7585E3128D2C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "15baa19e-b7f2-4540-bb64-cd849c2bb4fb", "value": "3072:C/4g3Kd1r+5hZmxgA9OKdwwjF9GhsR1Ae:O9an+5hZLHKdwwjF9GhsR1Ae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "0e8eb27f-d7ab-4920-87ce-8ccbf23551c6", "value": 116503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "81410d46-fd2a-4104-81b8-c940b5aaa176", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f09bcf0-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "80eda838-44cf-4724-9e1c-b5016cdd32f7", "comment": "Malware payload (Gafgyt)", "value": "bd0c9809ca3833b0a096f03e9ddf6d9c", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "ecd0db57-9fd8-4a75-99bd-7cd51650fd85", "comment": "Malware payload (Gafgyt)", "value": "aa6df8407728c688e285438737916fde9b9fcf0c07b7d35b5585ab5cb028d9b5", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "7c235faa-78b0-45df-bea1-7130794f7c7e", "value": "T183130250638105DBF5232B3287D14B672EE847D339A3A804DD84E34EEE4596CB9D2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "3871c73b-69c0-4389-9cf8-07cd9dc7819b", "value": "768:lQAyqK/baMUebiosgYBWNLjrAi2Wd1j4Cj1NaT/3/59TYAqD60JgGlzDpbuR1Jm:CfJ/3UemJglNLjrA4N4CNU/LTYAqD6sT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "dd440a30-2607-41e7-81e6-e70ae74b57b4", "value": 44752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "3845a397-b96b-46b8-8f19-4f9a48263ae3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f1c9bc1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "d910717b-b575-49cb-bf30-3b3cbb778b6a", "comment": "Malware payload", "value": "8a0b13bc0cfc26acc7909e4adf2c76a7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "4f57dd54-d720-437e-9fff-b8b12a723d56", "comment": "Malware payload", "value": "ac039532376dd0433ae81a98d1dde4f56ce012835328a0023275805cd1d2dbf5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "883b359b-8ebc-41d7-8216-6c003ef15432", "value": "T1D0839C43C7514D98C50D99F13070AAB54F6393A281472FB7B91ACBA89843E8DB16E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "a21faf47-02dc-406d-9c80-2de942f951e5", "value": "1536:vzvXLp5mmtI+glyfO+0zKITme07+ftYCIWIABXL3bmg/nNm0sTQKfX:7jK0I/lyfO+02IS0tYC7nN5oX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "beb97420-b0a9-4f9b-89d4-d1898ac2520e", "value": 83184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "0e17c6d6-d495-494e-80f1-270c897dcb63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f22f878-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "b703dcb1-2ded-4b4c-978e-87284f75824b", "comment": "Malware payload", "value": "03a0f23be925361954edaf95e5dab1fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "a2bf9b31-3ce5-4958-baea-949272d7011b", "comment": "Malware payload", "value": "281a5ce7ac6acca2fb9de52e2660427e58d40a3fc76064f767ee3da1e9e6ba37", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "67dc65ac-2754-4fa6-a29e-eb1049e2aa99", "value": "T133D39D83F3474491C81649F507C72BCE6E6312368F0B9AE36D0DAA366D761CB491AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "a884a1d3-53a9-461f-97fe-99276bdc2793", "value": "1536:2VNfZsZ01ZVKiNur6UU8aOWaPiCneAG0l4GyVxlB/gI3bfsz6NInbOVvsTv/LWT:YNfZLxurFaODayZG0ByVHVgkqkInbDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "cc3dbd19-5b06-4820-b5ab-8ce51d20c7cc", "value": 132284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "886db127-7aa3-455a-9790-b27a66fd06b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f327528-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "8c7fb064-a7be-4b70-8872-a2c49ca8ab07", "comment": "Malware payload (Mirai)", "value": "6aabae4494ec8a1215ebebfd6299673f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "9d5cbf01-be46-4d18-b542-b0fea2f17be6", "comment": "Malware payload (Mirai)", "value": "e40bbe013551d089e2ed039ef323b453ea277325b18d23eeffcff07c17ec2db8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "f079b430-ad28-4bcc-bbf6-6278e0a8ad16", "value": "T114934A17B653C6BAC0874BF41BDB9A314923B8BD0B227206B3D4BCE67F165A61D19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "c2759ee5-d6e4-4f65-9c76-8cf636f1d8cb", "value": "1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3yphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdyphaE/XVog99um2XFY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539201, "uuid": "e0808e94-c329-4969-94c5-f99dbb0898c9", "value": 94012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539201, "uuid": "5eb0a7a2-5520-4df1-8e12-ef1d1145fbf1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f7d7af4-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774539202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "8b7cb717-3b31-4be6-bcf5-0cfd90091efa", "comment": "Malware payload (Mirai)", "value": "c66b2860842dbe7aff3e17e693983c5b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "c3ded3c9-2692-4ad7-8143-041aa8b8ee3c", "comment": "Malware payload (Mirai)", "value": "77382d25381260f27a9b067bc5f51be93b460187d0d300428785ee7f63e62439", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539202, "uuid": "3f90520d-e4af-41a2-afa2-8efa44fc3002", "value": "T1D2B3E857FB11CEB3C85FDD730AA68A01108DA99746D57B6BB3B4DA5CE74684B08E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539202, "uuid": "f86a62d5-f713-4b27-b1b6-8db15ee32840", "value": "1536:Tgz/qzNLW/fMiZIX98U0I/QwErQNOK5hVwbfKdwwjF9GhCPR1Ae:Tgz/5f5g8utgm5hVwjKdwwjF9GhsR1Ae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539202, "uuid": "bdcfca97-8857-487c-bf14-51c408c4d6e4", "value": 116647, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539202, "uuid": "9fe09db3-0b96-4db9-b1b5-fea36bd21849", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "260f3734-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539213, "uuid": "2d678c36-0344-4301-ad88-1356a15a2c8e", "comment": "Malware payload", "value": "5d144904b8e233fbd1477e684a2de7b1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539213, "uuid": "8959a033-f7aa-4843-bc67-0ac492d37a40", "comment": "Malware payload", "value": "4ee0a5751368da97fb726a43252ff62f2a061fee755392c839083eee18201f4d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "807cb1a8-f597-45ba-af63-fc00f1d97331", "value": "T179873B47F8E21DA4D4EAC570D535815BBA723C291B3C23DB0AA1F7201F3ABD06A767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "31d17c79-477f-4b4b-9ef1-e318c244f426", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "583a552a-2e90-493c-a69f-7c0adddac55a", "value": "393216:/a4Yj8QfcszDIGcXB9cuM1feVjjdV/Qbt:/K0szDIGcXBuj2VjRV/wt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539213, "uuid": "4f73c17c-b9bf-49a3-a28f-6a6d83847287", "value": 36843520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "8cec0052-4a20-42fd-a0c9-ce044af50a53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51755b8c-1542-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539213, "uuid": "195cdfe7-a321-4cb8-8391-31f312ddfcce", "comment": "Malware payload", "value": "d7e2b193229aea8e1632cea82b8e5ef6", "object_relation": "md5", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539213, "uuid": "6f0e943e-17a6-4c9e-a753-aebaa8e4da60", "comment": "Malware payload", "value": "b0e328a131e4d679e9b268552db99ca2d46051b9205a67f9b7f7c1628983daae", "object_relation": "sha256", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "49b78b4c-5b2e-44b7-b967-afd28f476533", "value": "T18D873913E8A544A8C5A9D534C6769123BFB27C49873033D37B68FB206F76BD096BA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "a923e7f8-adbb-4e40-b63d-57a860b607e7", "value": "196608:gXIKebtBVbf07AKTzwF72xu0bLpHB8FGZ4WmO0sSe4nZBkTEqEVWUh+:gEbt/fa1wFExdhKGZ4WmO0s7+ZRDM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539213, "uuid": "41756229-8c72-4838-a0b1-0daf23c107d8", "value": 37970104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539213, "uuid": "f4b10636-ae24-4999-9e22-c3c880362277", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29120134-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774539218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539218, "uuid": "4e387a1f-d2ce-4ad5-b971-ebd565a8967e", "comment": "Malware payload", "value": "f3fd650efd78962d7a82d93f03ca01c7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539218, "uuid": "d0f1b39d-49c0-4db0-be92-4469c6a5f974", "comment": "Malware payload", "value": "da43e93ee95c7cdfd394994d6cb1d33ec87501b809758b00ffe4b6d4355280dc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539218, "uuid": "fba971c5-c0ca-49ea-8955-ca1ccda9a232", "value": "T14B873B87F8E21D94C4EAC5B1D135816BBA713C285B3C23DB0AA1B7241F3EBD05A7A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539218, "uuid": "895ebfb6-5ee8-403e-9cf6-e16f4c62a3f1", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539218, "uuid": "c7334f0e-ac5e-4680-ba7b-f8ffab696835", "value": "196608:GSEgAVbzM4Vy0xOwjp4W+rLOH0L+Re9MJghj9lc:GfbzM4cpCp4W+r1L+g9bp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774539218, "uuid": "2b5141ac-5b0c-4d16-a9e6-5988203fa459", "value": 36576256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539218, "uuid": "53896dd6-ec97-43e0-a588-a1ce09766ab5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "673950d3-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774540695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540695, "uuid": "2ed3ea51-8216-48c3-a245-342d2db3bc34", "comment": "Malware payload", "value": "df89094575062fc3b994525d9a9a928a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540695, "uuid": "087e181a-bf89-41cc-903c-06f031874990", "comment": "Malware payload", "value": "950a3a8ef18f51b89d5082471cb7704a153d5866254503fe7d64be1003509abf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540695, "uuid": "304d15c6-4e74-44e0-b8e0-f84f1083973f", "value": "7A23018623662FB2D13158F5E7FCEF85A14A7D94AFE61C0A7C227698B07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540695, "uuid": "f5ed2b44-8356-4f4d-ad33-a5ce4487e746", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsH:yYI0ARqw1qAEv7UIFM8oJorFH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774540695, "uuid": "973c29b5-fb68-42b8-b785-b55f8069a972", "value": 49280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180f1fdd-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774540836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540836, "uuid": "93e9a1cb-94ef-4e59-b714-b868b49d0080", "comment": "Malware payload", "value": "4ac6bbfa3abfdccd467339b3c509fb32", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540836, "uuid": "ed3f88ec-03a7-47eb-b7d6-89fc22a6e279", "comment": "Malware payload", "value": "3b520e8fac265406d1b67df863966ae456981b5c9ed92466011f8194a54c4af5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540836, "uuid": "c24dbcdd-5839-4d74-84e1-f9df9789a196", "value": "AE43024623A63AB6857149F1A7F8FF49F14A3E68CFF61C057C217A58A93236D28C4D1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540836, "uuid": "c84b9a22-f438-44d6-a3ca-2817028f69ff", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfX:yYI0ARqw1qAEv7UIFM8oJorFquyX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774540836, "uuid": "ac084da9-af98-4e01-b485-9d8b8426afa3", "value": 55268, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "742d1e3f-292d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774541062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541062, "uuid": "dc479b31-0606-4b1e-82bd-c02bbe254382", "comment": "Malware payload", "value": "bdc499a381131c4d8d47b5641b4bad60", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541062, "uuid": "fdd110eb-d2c4-4612-85c2-97f27ee738ca", "comment": "Malware payload", "value": "61f5cee28f7d2e28fc08c14ef45db329d43ce2c236d6b8de8b8ac23ead255041", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541062, "uuid": "5be6a483-7283-49c1-ada9-37b865ac851b", "value": "T1595119FD7D38A1E22DD0B976A3C65742F10121B7E0A40C01F32EF79A8F987A0F0906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541062, "uuid": "960f9ac7-fc36-4b7d-98cb-4b184c41a473", "value": "48:afhBvN2ufHMzzkn6DXx3wSxxSEHbTENk7wAV969KpI4QMqENkWjE4UwjgekLLkiD:kvN2ufMPJHsNRkN1WB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774541062, "uuid": "0f04e724-fce7-4cc0-9079-9cafea3044df", "value": 2617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541062, "uuid": "6d899ea4-a3ee-4ef9-850f-1defb83f1582", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b48e1092-292d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774541170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541170, "uuid": "f03c244c-5fe8-4db9-86b2-4e7e90f26bbf", "comment": "Malware payload (Mirai)", "value": "b1cf1b587f98ede03804ddb6d26c09ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541170, "uuid": "dbd2c7be-d104-451f-a823-b3fac6a63581", "comment": "Malware payload (Mirai)", "value": "4834adc057571eb273afc896f236c93c199a62a0d9a5441860c82d947498c1fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541170, "uuid": "a3937692-d957-4bc9-86f1-1120a4bd9845", "value": "T119B2E1346907C4B0E370BC36FDB9C70A8B5736BB9BB434310A609B7D775868725782", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541170, "uuid": "e1b9c7f0-ca8c-4386-9587-a8ce98a00383", "value": "768:BgRmftmORW2o/H0iPjmNc0njAfZis3Uoz/k8:yw3W2mO/cfZfzM8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774541170, "uuid": "bf5a7825-167e-4102-bc5b-f771b2058a46", "value": 25580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541170, "uuid": "8564935e-f720-4cb9-b142-e21bd7e932ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9008a83b-292e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774541538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541538, "uuid": "fb58a0dc-b3a9-45de-9527-cc440fced471", "comment": "Malware payload (Mirai)", "value": "4ce4497ee490139bf7a5ae40fe9b12ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541538, "uuid": "e0fd9783-0dc4-4d0e-830a-d2f15b36468d", "comment": "Malware payload (Mirai)", "value": "c77690cda510333a6bb64e4f6ed874be5aab65286931b84f992fb28e3145045d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541538, "uuid": "e6803aaf-1877-4649-bb7f-715c7c47e389", "value": "T1B913E128D1285AEBE9FFA8330C12D081373537DA7DBBC4CAE5E3CF522D5666692409", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541538, "uuid": "651635e4-dcfa-49bb-bc73-3767df55eb8f", "value": "768:t2JCFCB4J4GnDRF/K0ohgxptOd7IVZ0ZDONvpTvno5/KgGy70Rrg04uVcqgw09L:t234WkP9ouptA7YZ0ZDOnTvnen84u+qW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774541538, "uuid": "219436e5-e5ce-4811-a1f7-0e0b09d567be", "value": 42176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541538, "uuid": "5f6b9ec5-1cdd-4110-a8f9-cea541276cbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6ee7973-292f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774542140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542140, "uuid": "e39dc820-b812-48ba-84e8-6e92986d273b", "comment": "Malware payload", "value": "5f1c14cb7946a636786521cbc15b1b04", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542140, "uuid": "f9bd1fec-876f-4d91-aff7-c82591635bae", "comment": "Malware payload", "value": "c3b8803ca6b48a94a686ebb7d3add38fdd61f2fca5a6fff1da2250732d193afe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542140, "uuid": "2d3389b3-f3c4-4c00-823b-9c463fca84be", "value": "T1B7663332F66C2EC9E83BE57BA0A1278483D7130ED545843595907EE8B2F27CA08DD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542140, "uuid": "f8287eee-5001-4fad-a0a8-68a43e07c7e9", "value": "196608:+ZftUSZcKQ840uU+HB/OGUElH6XU8YYlbHXUI:+BKzKQxrU+h/PUEl0U8YYlbEI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774542140, "uuid": "4aebbcbc-a0d6-4edf-ac79-4a9c9ca0e388", "value": 6611029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542140, "uuid": "aa9f0aa1-64bd-4929-a563-a37dd789607d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54d138e6-2930-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774542298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542298, "uuid": "43938fdc-492e-44f4-999b-dbab627cb1d4", "comment": "Malware payload (Mirai)", "value": "2e5c0a2722fc771f11a8001e69fceb4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542298, "uuid": "83d44e92-9c8c-4780-b529-f9904a68de6c", "comment": "Malware payload (Mirai)", "value": "2bcbcef9bde8e2a056288bb21fe9628c4ef744d8b1a8bb5a80792a0166f00630", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542298, "uuid": "01f652db-4cd6-45e0-b7e4-e97dc5831207", "value": "T14B13E12576F40E90F0B021FD555A1C4D0694E3ADD0C89DD38AE5B136BCE2B29AB6C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542298, "uuid": "27346c08-cf9e-4688-9089-ebdb45bff364", "value": "768:r7lMBJB34XAKVvp+GMhFkRNtB74cLj8lMwj6kJjPivXVD1b/9Mf/LCnbcuyD7UHk:ro73X8vp+GsFk/75+J7oXVp+fjCnouy1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774542298, "uuid": "c8fbc341-d6d3-4ae8-b9f7-4388353279b1", "value": 41764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542298, "uuid": "7914dfc5-9424-4a6e-9407-da81546ed510", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92e8fa4d-2930-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774542402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542402, "uuid": "827fa0fd-0bca-4a69-9102-b71e07dc6b1a", "comment": "Malware payload", "value": "7394ed15ecb6ffecf8248786be32474d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542402, "uuid": "d910775b-3357-4bf4-9c15-6bdb3f8cbd83", "comment": "Malware payload", "value": "7f3c459b77e50544bcfae04ac7cc45fc6fb9c98c4804c543726469c96ec6aaac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542402, "uuid": "91d6c114-645e-46d4-9f50-bf43dcac885f", "value": "T1AE44F815F39C343A2173ED9664E52B6DA919E303931B05A83A59AF34CFCB9763230B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542402, "uuid": "12cb166f-af87-408c-a810-8f14b1c10e69", "value": "3072:oR3C9DC2/G9pG7sY/Lo4n9ByQIJmL1/XWyRutAI:83CfG9pG7sY/L39BYmL1/XWy2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774542402, "uuid": "959219c0-9eac-4056-aa02-5fe01e98293c", "value": 276460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542402, "uuid": "f01d88e2-c9b5-4148-a201-5d53fc8c4593", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fdf1b2e-2932-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774543283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774543283, "uuid": "852c7a3d-43cc-490d-9ecf-abd3ee61a211", "comment": "Malware payload (Mirai)", "value": "6eb8f497528a84da772c00706604a708", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774543283, "uuid": "ce903a68-6cf8-425a-8295-5b9900867a56", "comment": "Malware payload (Mirai)", "value": "aafab9a19d152c15e56867d5394a3ed28c856f615ec6df51bf2c952a3677b93b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774543283, "uuid": "2c2cb3ac-a201-49da-a706-2f473152729a", "value": "T1C6A33AE6F401CE7EF80ED77B48530A0AB535A3E106831B376397B963ED721955863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774543283, "uuid": "4a51394e-3e87-43d6-bb81-8b9662784ca8", "value": "3072:uvAIKq6y748jBNVwy7y/PjnaGA0KC9XsqY09Xsl:tq6yVwy7aPjnbX9e09Xsl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774543283, "uuid": "0d89773a-bd81-4558-a3f5-52d265a2c025", "value": 100840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774543283, "uuid": "bb3d0ad3-fc23-4415-85fe-a6b38f36a1bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5be1f6e-2944-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774551024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551024, "uuid": "e6afd38b-b992-4666-8a67-8970b40581e1", "comment": "Malware payload (Mirai)", "value": "864d6667a66f2589503d94d6a2473236", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551024, "uuid": "cc9cee30-4c3f-4860-88ab-6865ad6006ee", "comment": "Malware payload (Mirai)", "value": "d619c1d93a7e22eb876a64f594dd89d5a3fd5a50aac02de86b31bbdd1faa107b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774551024, "uuid": "af581530-ba65-43d1-aff3-ec6be0188509", "value": "T16423F1EECDA04642C7FB5D7A359E92E29F0492D160FB27350F929DC121A2D0B249D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774551024, "uuid": "83ef10a0-df7e-475e-a32f-03264b82e98e", "value": "768:QdNqQjJge6Pb7KY1aKzD+o6TEgsho0uCukXtNX4K38vVYHXCFNK0SWiC:Qj7Jl6Pnv1Esh6atFEVJ75CC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774551024, "uuid": "e2e9b346-9937-439f-a938-d74931d7a9ed", "value": 46692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774551024, "uuid": "40e9df71-e04a-4da0-80d1-5c2cdac3e946", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "456fda9e-2947-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774552150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774552150, "uuid": "5a447443-a1cb-4108-a35a-f780ad409bc2", "comment": "Malware payload (Mirai)", "value": "af2e516532dba262fe03eed7b5689fde", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774552150, "uuid": "cc9b9a4b-866d-461d-8585-cb081a5d6f46", "comment": "Malware payload (Mirai)", "value": "de0cac07e9485b14d817953615515d37dafea9a80f29efa7c5d8e723ce789976", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774552150, "uuid": "5a81158b-7e60-4c21-9fb6-71fb5975c72d", "value": "T1B123F1246A21EA65C13068BBCA5248C77B572FFDFCA9703791075A2C36C1C093DBE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774552150, "uuid": "52a93c2a-7c75-4f7a-9e83-520c6d84df7e", "value": "768:2R8p8/4D6MYLtX9k3Mtf6I9Mn8sI/pfWRPQokyA517dtFKcCNTbyNQHzYgG4VHTj:zp8hDtX9wM56IxsI/agT79pqbyNQs+V3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774552150, "uuid": "18765df5-d069-4092-bdb6-3eb6b5eb0b1f", "value": 46120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774552150, "uuid": "b97ba7a8-3fd6-43f0-b0c4-e8366889a14e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "364c1b05-294b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774553843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553843, "uuid": "422d3df5-d35c-4fbc-b3b6-1d8faf84fcc5", "comment": "Malware payload (Mirai)", "value": "38913d91592e34ae9ad62e5ee4c9d590", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553843, "uuid": "5d8c2b0a-25ac-405b-b350-5e985a21a67b", "comment": "Malware payload (Mirai)", "value": "4dae491423ca288e9e7adb7afdd7d16be63a7496baf4683e602e6b0544307f98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553843, "uuid": "6fd685e3-576d-4b4e-9241-835036800926", "value": "T155463841BB1C0523D3520DF0993E43D5F3663A4341B6A52B6B0FAB4B7239A36A2D77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553843, "uuid": "e43d7a24-7060-4142-bb94-a88c84e75c6a", "value": "98304:DwBShvcztjewCHSDmO6PM+PmaCwwEIKd7ZLOQ8MMH6dHSBCKfO78CxjfTruth0Oi:TZGaCT0lwlFW6oRJHuClnVXVwxk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774553843, "uuid": "5172b771-3b44-4d33-89e3-3d50d5f69037", "value": 5530356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553843, "uuid": "90e46e10-61dd-4ca8-9fc1-ad64f10a889c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a87ed3a3-2958-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774561172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561172, "uuid": "8bfd24a3-5186-4e2a-babd-f08d9b80a6ef", "comment": "Malware payload", "value": "88a6bdb7d9816c454b0ebb31c8d8ccda", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561172, "uuid": "f1b02038-d0ec-4bc7-9980-dbeb15bc680f", "comment": "Malware payload", "value": "76caf15c285d81e2fbc1df64467d9652897ae2312aa6675a781f9934b2567462", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561172, "uuid": "c251406b-8b49-4a88-8169-bb6ec0f8af6b", "value": "T1AAC08C8620A41332C2315E4A64BDB2A4F3B134AB79C0DA3210F87766FDA8915D4360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561172, "uuid": "2c43adda-ec0b-411b-8d73-20843687374a", "value": "3:nsLgXZLrfpE65dKKuooTygajZ4TdiQd1xVVVVVXwop8ZMazg+vXqfKl1+:Eglfp7CKuZTzaaBrRw48Zhhvd+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774561172, "uuid": "73ed8369-3396-4823-af23-6614cb7622e7", "value": 166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561172, "uuid": "182df7b3-edf1-44f6-8930-2a275f7f2865", "value": "text/calendar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483509, "uuid": "73c95090-28a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4static.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483627, "uuid": "ba6098cd-28a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:54212/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483819, "uuid": "2caba625-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.85.240:50281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483820, "uuid": "2d08d024-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.144.126:42886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483929, "uuid": "6e2397c1-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484169, "uuid": "fd380cd4-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.213:49085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484289, "uuid": "44cdbe1e-28a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484475, "uuid": "b3a9c13d-28a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.152:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484709, "uuid": "3f3f8b87-28aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774484836, "uuid": "8af5e993-28aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.39.59:53139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485067, "uuid": "1487e297-28ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485373, "uuid": "cad66fca-28ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.144.126:42886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485548, "uuid": "331a5c99-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1store.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485556, "uuid": "382cb022-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.197.137.199:42811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485557, "uuid": "38642d6b-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.142:42792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485727, "uuid": "9dcccd29-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.131.163.246:40215/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485730, "uuid": "a004de57-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/5876083921/nP8xgws.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485848, "uuid": "e5d51123-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2remote.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774485976, "uuid": "327e24d0-28ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.11.89.31:45962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486031, "uuid": "53606460-28ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:39633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486217, "uuid": "c242fcdb-28ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.213:49085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486218, "uuid": "c2914cd1-28ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.123.149:58295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486330, "uuid": "0559f4d6-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3dev.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486337, "uuid": "09981862-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.11.89.31:45962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486626, "uuid": "b61299d0-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.131.163.246:40215/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486694, "uuid": "de416e0f-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.123.149:58295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486749, "uuid": "ff27a1ca-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4link.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486933, "uuid": "6ca1ae01-28af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.208.62:41974/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774486938, "uuid": "6fd2e9eb-28af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.197.137.199:42811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487111, "uuid": "d6ce4ebd-28af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487589, "uuid": "f3fa6b6f-28b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2power.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487827, "uuid": "8177d2b5-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.122:35785/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487840, "uuid": "89934b64-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.15:40993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487890, "uuid": "a74596cb-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3local.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774487947, "uuid": "c95d0256-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.170:52862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774488309, "uuid": "a0fc12ce-28b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4work.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774488728, "uuid": "9a778f88-28b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1infra.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774488794, "uuid": "c1dbfed2-28b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.15:40993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489089, "uuid": "71ae4277-28b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2base.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489326, "uuid": "feebe596-28b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.29:45941/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489342, "uuid": "0883625b-28b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.239:57242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489448, "uuid": "4799b031-28b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3user.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774489867, "uuid": "419154ee-28b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4link.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490119, "uuid": "d788c0c9-28b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.98.138:51040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490173, "uuid": "f7cf662c-28b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.203:36412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490292, "uuid": "3efa0b0b-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490526, "uuid": "ca91a60d-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.205.226.250:58124/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490527, "uuid": "cac2c493-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.29:45941/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490529, "uuid": "cc77a7dc-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.208.62:41974/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490599, "uuid": "f606bbdb-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:56108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774490647, "uuid": "1264162a-28b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2core.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491011, "uuid": "ebabff17-28b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3ghost.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491192, "uuid": "572c47b5-28b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:55799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491427, "uuid": "e3aafdae-28b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4view.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491678, "uuid": "791ad2a2-28ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.87:41282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491732, "uuid": "9962c225-28ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.98.138:51040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491865, "uuid": "e84dc21a-28ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.231:48291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491910, "uuid": "0322056a-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1proc.sunnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774491971, "uuid": "27ae903f-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:56108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492147, "uuid": "90d401d1-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7281753217/vArWrE8.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492161, "uuid": "99098749-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.10:36589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492272, "uuid": "dae9da40-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2point.sunnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492387, "uuid": "1fda320f-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.82.57:58311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492513, "uuid": "6acca8a8-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:55799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492513, "uuid": "6ace638f-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.66:59743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492688, "uuid": "d312280e-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3view.sunnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492696, "uuid": "d7f3aa43-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.85.76:40650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774492757, "uuid": "fc1dd45b-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.154.32:56737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493047, "uuid": "a94a7589-28bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.sunnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493468, "uuid": "a3b702a3-28be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.oakcore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493535, "uuid": "cc2e89d5-28be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.87:41282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493548, "uuid": "d3752939-28be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.231:48291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493844, "uuid": "842f1c13-28bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.154.32:56737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774493889, "uuid": "9ef055b1-28bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.oakcore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494310, "uuid": "999b1b57-28c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3field.oakcore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494727, "uuid": "929d2ab9-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4space.oakcore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494867, "uuid": "e60502c5-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.192.186:52587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774494925, "uuid": "0868137b-28c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.225.181:38187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495149, "uuid": "8db71ff8-28c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1proc.redbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495349, "uuid": "05143377-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:60780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495628, "uuid": "abb5d3b7-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.238.240:49616/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495630, "uuid": "ace80891-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2steel.redbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495756, "uuid": "f7fedbb5-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:60780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495992, "uuid": "8470b4fe-28c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3core.redbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774495997, "uuid": "878419d2-28c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:54193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496649, "uuid": "0bdcb010-28c6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4sat.redbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774496833, "uuid": "797f5b17-28c6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.blugrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497188, "uuid": "4cfb712d-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proxy.blugrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497426, "uuid": "db42131c-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.65:35704/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497548, "uuid": "239603ff-28c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3data.blugrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497726, "uuid": "8ddc5fb4-28c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.21:43646/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497740, "uuid": "960594f3-28c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:54193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497912, "uuid": "fc8b1eb2-28c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4point.blugrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774497984, "uuid": "27fe5a79-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.39.17:58208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498231, "uuid": "badb4a7d-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.120.76:58714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498389, "uuid": "192a92dd-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flamemarket.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498689, "uuid": "cbea1e77-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://w8nzz58.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774498818, "uuid": "18e3836e-28cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.210.224:53627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499111, "uuid": "c78216bd-28cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neuron-graph.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499225, "uuid": "0b911dba-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.246.228:38180/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499225, "uuid": "0b983523-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.65:35704/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499478, "uuid": "a28065e3-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.149:32854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499481, "uuid": "a3ff370d-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.37.185:34524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499526, "uuid": "becaf6b5-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.118.21:43646/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499528, "uuid": "c00cc6aa-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pubserv.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499778, "uuid": "54f1c0e9-28cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.46.195:57833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499826, "uuid": "718c43bc-28cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.246.228:38180/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774499947, "uuid": "b9cb3fc4-28cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaul5-vault.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774500310, "uuid": "91d5584c-28ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://58edm.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774500437, "uuid": "ddf67e62-28ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.7.17:47408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774500727, "uuid": "8a5f08da-28cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tritideor3.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774500735, "uuid": "8f7e3b16-28cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.110:47420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501088, "uuid": "61bed886-28d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorcresta.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501327, "uuid": "f04497da-28d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.12.36:45414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501510, "uuid": "5d7ea782-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trans5-ring.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501637, "uuid": "a95c2082-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.210.224:53627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501753, "uuid": "edf1a7ed-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.123.244:57829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501753, "uuid": "ee77f50d-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.157.5:53194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501928, "uuid": "5646fa88-28d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ic3-frame.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774501937, "uuid": "5babbfb5-28d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.53:47046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774502351, "uuid": "529f60af-28d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://railvalidator.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774502710, "uuid": "2883d21f-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cav33-phase.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774502780, "uuid": "52462157-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.110:47420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774502826, "uuid": "6e062672-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.50.224:54306/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774502898, "uuid": "98d05fc0-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.123.244:57829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774502898, "uuid": "98e07103-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.37.185:34524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774503070, "uuid": "ff6aab8d-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:60664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774503132, "uuid": "23e2af38-28d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crypt0-vector.sunnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774503133, "uuid": "24b3e14c-28d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.53:47046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774503255, "uuid": "6d8e86a6-28d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:56172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774503548, "uuid": "1be3b8c1-28d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://storapowe.sunnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774503727, "uuid": "86a1f9f8-28d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.80.27:53404/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504028, "uuid": "3a412d1a-28d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.50.224:54306/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504028, "uuid": "3a4fa09d-28d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rain-wave.oakcore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504147, "uuid": "8125ad11-28d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.6:41069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504510, "uuid": "59a1d2e1-28d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d34l5-well.oakcore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504580, "uuid": "83857ae0-28d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:60664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504581, "uuid": "83b02f17-28d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:56172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504754, "uuid": "eacd32a0-28d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.166.126:43230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504927, "uuid": "51e2af59-28d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.80.27:53404/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774504990, "uuid": "7765c855-28d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xun7.redbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774505348, "uuid": "4cc78f5b-28da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.228:35668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774505409, "uuid": "7177227d-28da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://woonort.redbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774505589, "uuid": "dcaf01c7-28da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.6:41069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774505887, "uuid": "8e5ce23e-28db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5par-stream.blugrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774506127, "uuid": "1d6e7326-28dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:35860/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774506310, "uuid": "8a5f8f5e-28dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://directdrive.blugrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774506381, "uuid": "b4e8403a-28dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.166.126:43230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774506428, "uuid": "d07ff57f-28dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.190.192:36122/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507029, "uuid": "36f16c2f-28de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://0rrpdvc.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507148, "uuid": "7dac7a2e-28de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.23.45:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507270, "uuid": "c6d9f2ac-28de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://freightvalley.darkbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507399, "uuid": "1333f682-28df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.132.215:44000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507626, "uuid": "9ab12586-28df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.166:50394/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507626, "uuid": "9acce174-28df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.48:40804/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507689, "uuid": "c04df2dc-28df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://suddencul.greenpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507822, "uuid": "0f595ebc-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.205.226.250:58124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507865, "uuid": "2953b9e3-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "tftp://202.155.10.112:69/shr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b2cd8d1-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/add_to_startup.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b2cfc7e-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.155.10.112/shr", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b37f359-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/payload.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b3d5578-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/final.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b477da2-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/ccv.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b477f04-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/oa.wsh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b4781a9-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/dokumente/DKM_00KS0095283.PDF.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507868, "uuid": "2b4784fd-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/files.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507869, "uuid": "2b7a9721-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.160.62.234/lol.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774507870, "uuid": "2c1aa9d8-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-friendly-international-observed.trycloudflare.com/as.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508824, "uuid": "65219e50-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508825, "uuid": "653504ec-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7281753217/0WzaxgO.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "68f0677d-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "68f50e21-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "68f8209c-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "68fbf421-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "68fcba01-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "6925e518-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "692bf404-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.aarch64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "692f7702-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "6938022a-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "69381a49-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "693a0cdf-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "693d4c48-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "693ef1db-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508831, "uuid": "694018e1-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "6961d18f-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "6962cbe5-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "6962df34-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "6962fbae-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "69655cf5-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "696584f4-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/iran.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "69815f22-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/a-r.m-4.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "698171be-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/m-p.s-l.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "6989eacd-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/s-h.4-.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "698a030b-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/m-i.p-s.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "698d4972-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/a-r.m-6.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "698dfda2-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "699bd9fd-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/x-8.6-.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "699ca6a0-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/p-p.c-.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "69a122f5-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/a-r.m-7.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508832, "uuid": "69a957ca-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/a-r.m-5.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508834, "uuid": "6b17d812-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/6p1gSWtz/image.png", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508836, "uuid": "6bd49214-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://akl1.northoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508836, "uuid": "6c30419a-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.22:40197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508836, "uuid": "6c4a8c02-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vdyrne1g.westpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508842, "uuid": "6f84ac53-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.99.190.219:47940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774508846, "uuid": "7241f86a-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.122:41026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509073, "uuid": "f9241834-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://velg.deepoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509144, "uuid": "23815b71-28e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:33751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509144, "uuid": "2386da49-28e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:33751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509551, "uuid": "15fa0e54-28e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercresta3.sunnode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509736, "uuid": "848d2018-28e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.39.17:58208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509737, "uuid": "8553aeca-28e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.245.215:54943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774509971, "uuid": "106d706b-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-fluxex.oakcore.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510217, "uuid": "a2f9947c-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.99.190.219:47940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510357, "uuid": "f69a219b-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.157.9:47424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510459, "uuid": "3334f835-28e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.17.234:48616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510509, "uuid": "512f4f41-28e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l0ad-mark.redbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774510866, "uuid": "262f5c35-28e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr1g-cache.blugrid.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511346, "uuid": "4427f5ea-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.217.208.93/files/s.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511348, "uuid": "455e3a97-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.217.208.93/files/protect_stl.exe", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511348, "uuid": "4561d05d-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.217.208.93/files/big.exe", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511349, "uuid": "462baaab-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.217.208.93/files/ss.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774511431, "uuid": "768877f6-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.176.237:43386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512076, "uuid": "f7017521-28e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.202:54762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512377, "uuid": "aadc77b3-28ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.80.232:49494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512438, "uuid": "cf341a4b-28ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.80.232:49494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512725, "uuid": "7a4aaf06-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.198/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512792, "uuid": "a202b51b-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.198:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774512907, "uuid": "e6809ccb-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/vh2La66z/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513028, "uuid": "2e70ede0-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.105.142:47091/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513097, "uuid": "57ef1c40-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:55041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513162, "uuid": "7e6459e5-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513162, "uuid": "7e6537d1-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513162, "uuid": "7e65a4f5-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/x32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513162, "uuid": "7e95de1c-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/i-5.8-6.ISIS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513162, "uuid": "7e95f621-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/m-6.8-k.ISIS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513162, "uuid": "7eb6432d-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/x-3.2-.ISIS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513163, "uuid": "7f5f2ba2-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.197/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513164, "uuid": "7ff55521-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.254:55687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "8007745e-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "800a42ed-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "800a4520-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "800a52ec-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "8014d85e-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "8018a329-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "801d0341-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "80220a85-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "802cd3af-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513165, "uuid": "80337e72-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.249.228.212/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513626, "uuid": "933e023d-28ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:54187/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513747, "uuid": "db2d443e-28ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.212.61:39180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774513807, "uuid": "ff10ec61-28ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/MZb0H9Mm/image-1.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774514046, "uuid": "8d8a2788-28ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/bY1ydJDD/image.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774514108, "uuid": "b2674d0d-28ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasteb.in/PdFc8qfmIkPEom5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515069, "uuid": "ef5fecfb-28f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.89.224.210/1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515127, "uuid": "11f928ae-28f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.105.142:47091/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515189, "uuid": "36d5278c-28f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.127.247:53544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515503, "uuid": "f21f4e72-28f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.212.61:39180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515564, "uuid": "167ba276-28f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.7.17:47408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515729, "uuid": "78b20103-28f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.33.135:33033/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774515917, "uuid": "e89f3f54-28f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:55777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516338, "uuid": "e3a14cff-28f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.78.179:36993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516568, "uuid": "6c5b12ae-28f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://depdea.amber-drift.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516886, "uuid": "2a6f2af7-28f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.248:55487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516890, "uuid": "2cc65e82-28f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.105.50.190:44266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774516929, "uuid": "43a9f6f0-28f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://narr9-vector.aurorift.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517421, "uuid": "68d1c785-28f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.183.250:56872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517421, "uuid": "68e35da3-28f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.153.6:44853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517526, "uuid": "a7da21ad-28f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ampsyst.brisklume.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517828, "uuid": "5b6a09c8-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.57:41729/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517828, "uuid": "5bb71824-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://glacier3-signal.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517901, "uuid": "8749684e-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.78.179:36993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774517902, "uuid": "87b1c712-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.224.255:47026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518080, "uuid": "f1b75bf2-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.245.215:54943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518129, "uuid": "0f5933ee-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pten.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518255, "uuid": "5a097a21-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.41.44:34819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518264, "uuid": "5f6e51f5-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:58635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518324, "uuid": "83248fb8-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.167.165:54421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518324, "uuid": "83249685-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.41.44:34819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518428, "uuid": "c1311366-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.234.94:56742/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518430, "uuid": "c27d3a62-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://daemon6-logic.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518508, "uuid": "f12f67dd-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.248:55487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518509, "uuid": "f1c8db85-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.230:37013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518510, "uuid": "f1f85e93-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:59744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518562, "uuid": "114f9fe2-28f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:59744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518610, "uuid": "2dd388d3-28f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/1900003348/J3sfClg.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518682, "uuid": "588f85b4-28f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.183.250:56872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774518788, "uuid": "97aa4199-28f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0rte8-flow.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519087, "uuid": "4a6104ba-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nfqbq5.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519221, "uuid": "9a1136ce-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.182:39980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519294, "uuid": "c54f9916-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.248.185:47242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519326, "uuid": "d8a02d20-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:35949/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519326, "uuid": "d8ba6258-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.57:41729/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519388, "uuid": "fd51b203-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.201.2:33515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519449, "uuid": "21cfa84c-28fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://looseoak.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519521, "uuid": "4c8b6ad3-28fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.192.186:52587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519867, "uuid": "1abfa534-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4jv9.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519926, "uuid": "3e53ae1f-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.234.94:56742/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774519938, "uuid": "459a0d3b-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.230:37013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520062, "uuid": "8ef42459-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.36.35:33844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520062, "uuid": "8ef57021-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.36.35:33844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520108, "uuid": "aa8ec03f-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clie-zone.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520301, "uuid": "1da255cd-28fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.32.205:33296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520527, "uuid": "a48a7db0-28fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s75g160.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520602, "uuid": "d15a17e3-28fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.33.60:47957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520719, "uuid": "16974b05-28fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.248.185:47242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520827, "uuid": "57555033-28fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:35949/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520827, "uuid": "575885ff-28fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.114:39586/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774520888, "uuid": "7bcb36bc-28fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://buildwar.thornbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521076, "uuid": "eb6d60bd-28fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.182:39980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521135, "uuid": "0efbc019-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.10.242:54198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521191, "uuid": "3019f4c8-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://peta-cre.tires8f.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521365, "uuid": "97d35f35-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.209.95/update", "Tag": [ { "name": "1", "colour": "#1cace5", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521365, "uuid": "97d571f6-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.209.95/service", "Tag": [ { "name": "a", "colour": "#d551ed", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521426, "uuid": "bc20b259-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ads-storage.biz/update", "Tag": [ { "name": "1", "colour": "#1cace5", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521485, "uuid": "df28ef77-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.209.95/ycl", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "d", "colour": "#207d31", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521488, "uuid": "e0e9f65d-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mermarkal5.velorune.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521621, "uuid": "305d5446-2900-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.32.205:33296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521790, "uuid": "951fa9c1-2900-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.10.242:54198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521791, "uuid": "959352c1-2900-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.1.39:36709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521847, "uuid": "b72f5402-2900-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://smaton.z7hire.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774521919, "uuid": "e217cd87-2900-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:50897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522027, "uuid": "2283dbdf-2901-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.114:39586/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522039, "uuid": "2995038b-2901-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.200.74:48371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522210, "uuid": "8f482cee-2901-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crystal-bridge.amber-drift.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522329, "uuid": "d6a81ad3-2901-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.40.148.235:49098/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522509, "uuid": "41d877bd-2902-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-spireis.amber-drift.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522812, "uuid": "f6230788-2902-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quanpuls.aurorift.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522927, "uuid": "3aae6606-2903-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.97.192:32873/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522927, "uuid": "3ada8f86-2903-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.97.192:32873/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774522994, "uuid": "62e87bdb-2903-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.127.42:45191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523169, "uuid": "cb210cb6-2903-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://0sta343.aurorift.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523293, "uuid": "15419f63-2904-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:33506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523357, "uuid": "3aeb35f8-2904-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.1.39:36709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523417, "uuid": "5ebfc99e-2904-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.224.82:36691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523417, "uuid": "5f324e8c-2904-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.112.78:40086/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523528, "uuid": "a0dd4360-2904-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scantermin.brisklume.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523542, "uuid": "a940a35c-2904-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.200.74:48371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523827, "uuid": "539f44e1-2905-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://runw-maj.brisklume.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523828, "uuid": "53a766d0-2905-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.40.148.235:49098/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774523836, "uuid": "586b0375-2905-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:50897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774524187, "uuid": "2a2f9fcf-2906-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnolecu0-drive.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774524322, "uuid": "7a28da3b-2906-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.205.113:49796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774524378, "uuid": "9bd7dc17-2906-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.127.42:45191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774524546, "uuid": "0026b0b9-2907-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://27tjfer7.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774524849, "uuid": "b45b69c4-2907-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxyspe.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774524917, "uuid": "dcc4f83f-2907-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.224.82:36691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525035, "uuid": "237406b4-2908-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:33506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525147, "uuid": "6640d8c7-2908-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tricorear4.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525156, "uuid": "6b5c245f-2908-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.112.78:40086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525526, "uuid": "47e4ef44-2909-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.243:37616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525567, "uuid": "603bdc0b-2909-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://plain-ivo.crestfall.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525653, "uuid": "93813684-2909-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.7.184.226:45934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525757, "uuid": "d202107d-2909-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.205.113:49796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525868, "uuid": "13bb59bf-290a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-valeet.crestfall.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774525926, "uuid": "36b445c6-290a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.70.193:57630/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774526227, "uuid": "e9ec86a1-290a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-5udde.dawnspire.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774526590, "uuid": "c1f4db9d-290b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-5un.dawnspire.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774526948, "uuid": "978b7f14-290c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultrbird.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774526951, "uuid": "9976ff17-290c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:54458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527127, "uuid": "026bfde8-290d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.70.193:57630/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527257, "uuid": "4fffbde1-290d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.37.205:47263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527257, "uuid": "50045db9-290d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solidmount.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527549, "uuid": "fd9ce911-290d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xr71purq.fablegrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527618, "uuid": "273679b5-290e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.160.220.47:54273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527672, "uuid": "475fbb77-290e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.7.184.226:45934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527912, "uuid": "d670e77c-290e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stocforg.fablegrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774527921, "uuid": "dbba8b11-290e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.21.178:33661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774528149, "uuid": "6350174a-290f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:54458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774528271, "uuid": "ac0f307e-290f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shelldecode.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774528567, "uuid": "5ce59fa4-2910-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orchestheo.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774528760, "uuid": "cfc0603c-2910-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.37.205:47263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774528867, "uuid": "0f3cc9f9-2911-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/1032264266/qvQb5og.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529168, "uuid": "c2f9d444-2911-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-tideal.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529227, "uuid": "e5d023b0-2911-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.24.65:32775/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529290, "uuid": "0baa6def-2912-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p0lar-mark.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529355, "uuid": "3236f594-2912-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:44462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529409, "uuid": "5280c507-2912-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.21.178:33661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529588, "uuid": "bd0f7185-2912-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://irgss.stonemuse.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529841, "uuid": "53db62ea-2913-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.67.93.111:36043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774529946, "uuid": "92c0e6aa-2913-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cedargri.stonemuse.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774530079, "uuid": "e1a298db-2913-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.252.71:47347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774530250, "uuid": "47feba9b-2914-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fj0r-stream.thornbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774530552, "uuid": "fb7c1474-2914-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fuddj2yd.thornbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774530910, "uuid": "d1065862-2915-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sign-live.tires8f.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774531208, "uuid": "82d3488e-2916-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://6u0py.tires8f.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774531518, "uuid": "3b66f02b-2917-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.27.67:41851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774531630, "uuid": "7e05900b-2917-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sket-stack.velorune.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774531929, "uuid": "303a1f4a-2918-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://torship.velorune.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774532291, "uuid": "087fd8bf-2919-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r1ch-node.z7hire.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774532588, "uuid": "b960a91d-2919-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://velcrest4is.z7hire.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774532660, "uuid": "e40513b3-2919-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.173:56535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774532827, "uuid": "47e4f8c2-291a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.197.88:54654/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774532950, "uuid": "90c8c559-291a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://eastretainer.ra8gera.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533248, "uuid": "42742780-291b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5hff.ra8gera.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533370, "uuid": "8b75b429-291b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.252.71:47347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533492, "uuid": "d41cde9a-291b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.83.13.37:3466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533550, "uuid": "f6aa6cdd-291b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.224.255:47026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533610, "uuid": "1a7b58ed-291c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-markal.ra8gera.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533973, "uuid": "f2c90b1f-291c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimb3-reach.ra8gera.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774533980, "uuid": "f71b443e-291c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.5.56:50936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534329, "uuid": "c6cd72e9-291d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.139.94:57035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534329, "uuid": "c6d182e2-291d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://plas2-graph.ra8gera.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534627, "uuid": "78ebad57-291e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tricrest7ar.x7lora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534628, "uuid": "7949c38c-291e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.190.247:54005/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534928, "uuid": "2c283a17-291f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unload6-gate.x7lora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534987, "uuid": "4f6488de-291f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.72.98:33067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774534997, "uuid": "556d4542-291f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.61:44362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774535052, "uuid": "7609b628-291f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.21.26.196:52069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774535227, "uuid": "de457048-291f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.6:54108/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774535294, "uuid": "06007923-2920-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bridgecampa.x7lora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774535469, "uuid": "6ebb1c3d-2920-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.166.98:49412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774535650, "uuid": "da235421-2920-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://royalgla.x7lora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774535837, "uuid": "49a8f62c-2921-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.156:43541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536007, "uuid": "af7ab944-2921-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://otter-aut.x7lora.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536077, "uuid": "d8ac3fae-2921-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.43.5.24:40236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536125, "uuid": "f5a6c69d-2921-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.190.247:54005/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536308, "uuid": "62c5bca3-2922-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ffzt1.fabledock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536327, "uuid": "6e26b8f2-2922-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.170.172:41374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536561, "uuid": "f944691a-2922-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.72.98:33067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536621, "uuid": "1d0f68b3-2923-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.21.26.196:52069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536667, "uuid": "3860f4ac-2923-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ewdgyl.fabledock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774536790, "uuid": "81c6ec7b-2923-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.25:59734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537027, "uuid": "0f388f50-2924-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5sxuqx.fabledock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537327, "uuid": "c1adda23-2924-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.68.31:50868/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537462, "uuid": "12a53e51-2925-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.206:39686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537568, "uuid": "517dd1a6-2925-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kernmetri.fabledock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537579, "uuid": "5818e3bc-2925-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.156:43541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537583, "uuid": "5a4dfe69-2925-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.170.172:41374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537810, "uuid": "e1f6280f-2925-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rendfie.fabledock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537823, "uuid": "e956d171-2925-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.25:59734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774537988, "uuid": "4bc44037-2926-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://55wmwoni.bramblepath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774538112, "uuid": "959bffd3-2926-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.6:46918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774538227, "uuid": "da2106de-2926-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.73.21:58510/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774538347, "uuid": "2217eed6-2927-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://inkchec.bramblepath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774538651, "uuid": "d755e03f-2927-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mertide3on.bramblepath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774538947, "uuid": "87b01a93-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v3ct4-loop.bramblepath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539022, "uuid": "b41dd648-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.206:39686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539133, "uuid": "f6a61389-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://66.71.242.68/curl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "f710f113-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.216.187:41865/Mozi.a", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "f7280bfe-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.68.31:50868/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "f73ca179-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.168.74:33332/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539134, "uuid": "f73f067d-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.168.74:33332/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7a1efda-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://eglimermailer.org/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7ad1bfe-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7ae8054-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7b48de7-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7b848a3-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7b980ab-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7baf7fc-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7bc9adc-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7bd4ff0-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://etinsendmail.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539135, "uuid": "f7dd31e9-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f8030a39-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://femilamom.net/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f803264e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f8032af3-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.166.173.36:8090/kan744_test_loader.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f80343ed-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/System.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f8063d5a-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/loader.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f809fcc1-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://etinsendmail.net/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f80bce8b-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f80c6bee-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/svchost.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f80c9597-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/RtkAudUService.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f80cab2e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.56/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f8113529-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gerlimeri.org/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f83eebee-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.166.173.36:8090/beacon_raw.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f841ac9a-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.166.173.36:8090/enhanced_beacon_final.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f84b412a-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/licenseservice.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539136, "uuid": "f85d5c45-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.217.248.44/verification.google", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539137, "uuid": "f8dc6927-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-captcha.cc/verification.google", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539137, "uuid": "f8dc6d0e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.166.173.36:8090/upx_beacon.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539137, "uuid": "f902fd6d-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.47.45.118/webplugin.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539138, "uuid": "f92b2ba4-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/rvp.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539139, "uuid": "fa485347-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.60:47662/Mozi.a", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539139, "uuid": "fa4a38f1-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.106.78:37243/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539140, "uuid": "fac41330-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/Ayhu.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539146, "uuid": "fdf51b6c-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://minecraft-java-scanner.pages.dev/downloads/Minecraft_Java_Scanner_2.0.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539147, "uuid": "ff03f559-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/steal.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539147, "uuid": "ff0c8b55-2928-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/dnsreslove.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539149, "uuid": "00394df2-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.166.173.36:8090/beacon_for_109.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539157, "uuid": "04e506b2-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://209.38.18.1/cbot/tls.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19cb89e7-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.143.196.35/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19cda620-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://macandcheeseagent.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19da6f5f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://surfandsharksaged.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19dadbc0-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://halflifeagency.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19db218a-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://onlinemoneyagency.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19deba4a-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crossroadbuild.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19df084e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mariosmanagmentsec.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e0038f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://forlifemanagment.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e13ccf-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://onlymediumsteak.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e2ab07-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.arm5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e311f3-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e341c1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e358ce-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.arm6", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539192, "uuid": "19e3a5b4-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "19e56f0b-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.arm7", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "19faf52d-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gerlimeri.net/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a3dc29f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a402bcd-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a44b279-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a44bc48-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.x86-DEBUG", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a47c071-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a48d60b-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4a99b9-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.x86-DEBUG", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4b2edd-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4b98bc-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4be0f1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4bf136-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4cba16-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4e558c-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a4e63f1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a518fe1-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539193, "uuid": "1a51b2ef-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539199, "uuid": "1dcfd7ec-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://marketingsuperstar.top/6rcbczLMf2", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539200, "uuid": "1e425930-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://apesecurity.top/6rcbczLMf2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539200, "uuid": "1e561831-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://mnsm.us.com/UserID751178", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539200, "uuid": "1e66bbc6-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539200, "uuid": "1e76514f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://redhairsyndrom.top/6rcbczLMf2", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539200, "uuid": "1e9b7d90-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1ef73b5e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1eff8bcc-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1f1cdb02-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.arm4", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1f1ce38e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1f231e84-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.mips", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1f2fec12-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1f34424e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://athome-srw.s3.us-west-2.amazonaws.com/SRW_8316/ArenaCX_8316.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539201, "uuid": "1f4145f7-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f4788f2-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.codecguide.com/other/infatica1140.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f7b28a6-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f8bd8e3-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f9243de-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.mpsl", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f9a5c03-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f9a627f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://etinsendmail.org/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1f9f5e79-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.24.238/fuckjewishpeople.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539202, "uuid": "1fa6878b-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/boatnet.mips", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539205, "uuid": "216ffc0c-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imagecopy777.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539206, "uuid": "222dad83-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/image099.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539214, "uuid": "26a24df3-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.148.183.75:8000/setup.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539214, "uuid": "26a24fd0-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.148.183.75:8000/sliver-client_linux-amd64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539214, "uuid": "26b28347-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wesneet.it.com/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539214, "uuid": "26bcf9ea-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://everycarebd.com/imgedu093.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539216, "uuid": "27dd99f4-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-43852e2f13f44540903efdf59f8a7582.r2.dev/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539216, "uuid": "27f86480-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://server.admirableskreen.top/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539217, "uuid": "285019ce-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://brsrys.com/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539218, "uuid": "291e65a0-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.148.183.75:8000/test.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539246, "uuid": "39c7e0df-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.15/hiddenbin/boatnet.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539561, "uuid": "f5d4c2a5-2929-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.33.60:47957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539609, "uuid": "12217580-292a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://river-fle.bramblepath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539727, "uuid": "58c1c466-292a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://0islm.foxglade.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539785, "uuid": "7b45fce0-292a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.73.21:58510/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774539976, "uuid": "ed292100-292a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.6:46918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540029, "uuid": "0c39e81f-292b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ekdt78.foxglade.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540039, "uuid": "1264593a-292b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.67.93.111:36043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540328, "uuid": "bec8d2ee-292b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uppxbwm.foxglade.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774540687, "uuid": "94f1e5d1-292c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://op3n-bridge.foxglade.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541049, "uuid": "6cb0fb5a-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5p4r2-forge.foxglade.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541062, "uuid": "7434d18e-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/dd.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7b9d18-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7bb7a0-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7bbb59-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7bcb2a-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7bd754-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_ppc64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7c6d07-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_mipsel_hardfloat", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba7f0497-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_mips_hardfloat", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba807058-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba82b4d3-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba82c906-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba834443-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba84ae1b-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba862b41-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba86ac77-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_mipsel_softfloat", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba8739ff-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba879f80-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba885615-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba885f49-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba8a29e3-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_mips_softfloat", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba8c8451-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba8c9c4a-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541180, "uuid": "ba8cbd6e-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/linux_ppc64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541232, "uuid": "d9605c0b-292d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:35860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541361, "uuid": "266a5bdb-292e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://demandnod.cl0verbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541528, "uuid": "89f7cd19-292e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.20.51.232:42223/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541828, "uuid": "3cedc665-292f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.112.201:34830/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541887, "uuid": "5fbe90d5-292f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.221.96:8080/14882.sh", "Tag": [ { "name": "GBR", "colour": "#56a1e9", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541949, "uuid": "85226f81-292f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fjordhard.cl0verbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774541963, "uuid": "8d3ba43d-292f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.48:40804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542129, "uuid": "f04bd531-292f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tar973lz.cl0verbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542319, "uuid": "6154f680-2930-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.248.205:50447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774542370, "uuid": "7ffb2c30-2930-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-4mp.cl0verbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774543025, "uuid": "0673201c-2932-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:50982/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774543025, "uuid": "0686663c-2932-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gu4r2-field.cl0verbyte.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774543218, "uuid": "7967d327-2932-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.97.109:39586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774544288, "uuid": "f730108d-2934-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1sync.frozenleafnetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774544363, "uuid": "2378831b-2935-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.89:57803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774544411, "uuid": "4076c22f-2935-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.89:57803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774544527, "uuid": "859299cd-2935-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.26:41892/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774544777, "uuid": "1ac62949-2936-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.238.231:59807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774544886, "uuid": "5b857e05-2936-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2data.frozenleafnetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774545127, "uuid": "eb1baebd-2936-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3edge.frozenleafnetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774545437, "uuid": "a3d5cda0-2937-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.4:47100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774545498, "uuid": "c85a8ce2-2937-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.123.47:42748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774545548, "uuid": "e5d5c4c0-2937-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4static.frozenleafnetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774545675, "uuid": "31cb0a6a-2938-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.238.231:59807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774545788, "uuid": "754b0313-2938-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.goldenridgesystem.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546098, "uuid": "2e2acc91-2939-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:43365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546209, "uuid": "700b5fa8-2939-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.goldenridgesystem.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546224, "uuid": "7935e934-2939-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.219.156.119:58417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546388, "uuid": "da90933b-2939-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.goldenridgesystem.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546517, "uuid": "27cc150c-293a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.172.196:59526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546688, "uuid": "8d79f386-293a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.goldenridgesystem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546697, "uuid": "930baf61-293a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.137.161:36957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774546927, "uuid": "1bea5ec6-293b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.165.148:33992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547046, "uuid": "63110ab0-293b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1store.silverstreambuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547108, "uuid": "87b1f9aa-293b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.105.50.190:44266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547226, "uuid": "ce0b6c65-293b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.249:38265/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547237, "uuid": "d4976c0b-293b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.153.6:44853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547347, "uuid": "1651d8ac-293c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2remote.silverstreambuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547649, "uuid": "ca3d1e1e-293c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3dev.silverstreambuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547709, "uuid": "ee139df6-293c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.26:41892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547826, "uuid": "33b71be5-293d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.9.85:56402/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547828, "uuid": "34e5216e-293d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.219.156.119:58417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774547947, "uuid": "7bf83253-293d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4link.silverstreambuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774548308, "uuid": "532bf362-293e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.blackpeakstorage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774548386, "uuid": "81730fa2-293e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.32.21:50607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774548425, "uuid": "99303437-293e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.249:38265/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774548668, "uuid": "2978d67d-293f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2power.blackpeakstorage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774548725, "uuid": "4c00648b-293f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:51517/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549028, "uuid": "003785fb-2940-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3local.blackpeakstorage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549039, "uuid": "07134b7b-2940-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.220.217:59146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549326, "uuid": "b216412d-2940-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.9.85:56402/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549327, "uuid": "b2930a73-2940-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.115.228:49246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549329, "uuid": "b3cf2e1a-2940-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4work.blackpeakstorage.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549571, "uuid": "43be1e34-2941-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.113.83:52121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549626, "uuid": "64ff9072-2941-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1infra.whitetideinterface.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549939, "uuid": "1f77d6d3-2942-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.172.196:59526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549940, "uuid": "1fb8a429-2942-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.164.149:45464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774549993, "uuid": "3f3873ff-2942-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2base.whitetideinterface.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550049, "uuid": "61232d62-2942-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.32.21:50607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550050, "uuid": "6183afd5-2942-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.91.84:41368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550539, "uuid": "853122d3-2943-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.139:50917/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550588, "uuid": "a212b3d2-2943-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3user.whitetideinterface.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550768, "uuid": "0d5d75d7-2944-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4link.whitetideinterface.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550774, "uuid": "10e79412-2944-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.220.217:59146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774550825, "uuid": "2f626282-2944-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.115.228:49246/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551012, "uuid": "9e9cedad-2944-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.coldstonemetrics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551249, "uuid": "2c1d5b9f-2945-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.113.83:52121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551367, "uuid": "7234dded-2945-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2core.coldstonemetrics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551727, "uuid": "48cdd65d-2946-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.91.84:41368/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774551727, "uuid": "49192d88-2946-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3ghost.coldstonemetrics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774552032, "uuid": "febd6306-2946-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4view.coldstonemetrics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774552037, "uuid": "01cdd67b-2947-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.170.232:44422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774552448, "uuid": "f6c04700-2947-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1proc.wildbranchcluster.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774552691, "uuid": "87870a38-2948-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2point.wildbranchcluster.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553047, "uuid": "5b8f4260-2949-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3view.wildbranchcluster.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553346, "uuid": "0e537f97-294a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.wildbranchcluster.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553710, "uuid": "e712c767-294a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.ironrootprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553892, "uuid": "53437958-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.201.154/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553892, "uuid": "535c136c-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.201.154/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553892, "uuid": "535c8542-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.201.154/massload", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553897, "uuid": "568f4746-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.201.154/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774553955, "uuid": "794c7b52-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.201.154/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554026, "uuid": "a365531d-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.201.154/arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554070, "uuid": "bd604de1-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.ironrootprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554077, "uuid": "c1a51171-294b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:48085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554256, "uuid": "2c9346bb-294c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:48085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554426, "uuid": "91fdd1a7-294c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3field.ironrootprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554786, "uuid": "687c441d-294d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4space.ironrootprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774554979, "uuid": "db1b1e4a-294d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.251.178:37348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774555087, "uuid": "1bc4f1b5-294e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1proc.darkcloudgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774555387, "uuid": "ceb48f12-294e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2steel.darkcloudgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774555747, "uuid": "a50034f1-294f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3core.darkcloudgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774556107, "uuid": "7bc5bed3-2950-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4sat.darkcloudgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774556170, "uuid": "a1005618-2950-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.199:58139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774556295, "uuid": "eb98c8bf-2950-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.226:54706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774556353, "uuid": "0e15b639-2951-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.bluepointterminal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774556709, "uuid": "e24f3cea-2951-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proxy.bluepointterminal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774557072, "uuid": "bad72fe1-2952-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.157.41:45884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774557127, "uuid": "dbe24c59-2952-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3data.bluepointterminal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774557377, "uuid": "708f566d-2953-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.199:58139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774557429, "uuid": "8f6eae4a-2953-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4point.bluepointterminal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774557726, "uuid": "40d8eb12-2954-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.64:52993/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774557800, "uuid": "6cb78206-2954-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.20.51.232:42223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774558397, "uuid": "d081cef9-2955-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.222.214:54750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774559348, "uuid": "07b8ca75-2958-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1sync.donkeyemploy.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774559349, "uuid": "082709d1-2958-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.177.26.196/files/5848981546/hRw1yLa.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774559365, "uuid": "1172966d-2958-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.157.41:45884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774559527, "uuid": "71e6b459-2958-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.64:52993/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774559768, "uuid": "01ea0e21-2959-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2data.donkeyemploy.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774560067, "uuid": "b3fb303d-2959-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3edge.donkeyemploy.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774560380, "uuid": "6e648923-295a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.21:41265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774560382, "uuid": "6fa6c257-295a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.41:43258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774560429, "uuid": "8bf8a78b-295a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4static.donkeyemploy.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774560729, "uuid": "3ead34de-295b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.angularsilic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774560804, "uuid": "6b5dd2e1-295b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.21:41265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561025, "uuid": "ef15e349-295b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.189.194:49143/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561089, "uuid": "15637f73-295c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.angularsilic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561628, "uuid": "5655334f-295d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.angularsilic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561869, "uuid": "e62579ac-295d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.angularsilic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561930, "uuid": "0ac8f6a9-295e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.28:49820/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774561940, "uuid": "106c2625-295e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.52.40:34442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774562048, "uuid": "50c1ab5f-295e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1store.cruciferdiesel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774562409, "uuid": "27e9f263-295f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2remote.cruciferdiesel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563014, "uuid": "90996873-2960-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3dev.cruciferdiesel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563187, "uuid": "f7e3ef05-2960-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4link.cruciferdiesel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563368, "uuid": "63628b8e-2961-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.investonerous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563495, "uuid": "af403778-2961-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.52.40:34442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563625, "uuid": "fcdd0725-2961-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.114.142:59889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563727, "uuid": "397ff847-2962-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.28:49820/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774563729, "uuid": "3a7f26a3-2962-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2power.investonerous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774564086, "uuid": "0fdca7a6-2963-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3local.investonerous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774564451, "uuid": "e956524f-2963-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4work.investonerous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774564538, "uuid": "1cdb7f52-2964-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.123.45.74:38722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774564568, "uuid": "2ef3ebce-2964-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.81:48178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774564880, "uuid": "e89bf5c8-2964-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://207.231.107.52/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774564991, "uuid": "2b4854fb-2965-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1infra.secretgeneral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565171, "uuid": "967d6c62-2965-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2base.secretgeneral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565353, "uuid": "02fbccb4-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/acb.xml", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565354, "uuid": "033da42f-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/acb.sh", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565354, "uuid": "037be035-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/mt.sh", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565409, "uuid": "23e223fd-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/libsystem.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565409, "uuid": "2428e6d6-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/curl-amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565409, "uuid": "24351db1-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/curl-aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565410, "uuid": "24ca28c1-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.87.106:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565413, "uuid": "26ab0b40-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3user.secretgeneral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565479, "uuid": "4e1a6d40-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.16.241/mt.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565480, "uuid": "4e90bb31-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.16.241/acb.sh", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565766, "uuid": "f8b1e368-2966-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4link.secretgeneral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565955, "uuid": "699e4135-2967-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/re.sh", "Tag": [ { "name": "kinsing", "colour": "#e7ee20", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774565955, "uuid": "69a1185d-2967-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.81:48178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566128, "uuid": "d08b029b-2967-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.usurylocomotive.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566427, "uuid": "82f95588-2968-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2core.usurylocomotive.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566557, "uuid": "d06b02f3-2968-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.89.157:53887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566724, "uuid": "341ff768-2969-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.163.34.244:26994/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566730, "uuid": "3796909c-2969-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:38354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566788, "uuid": "5a1966da-2969-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3ghost.usurylocomotive.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566805, "uuid": "64831a8a-2969-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.123.45.74:38722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774566920, "uuid": "a8933db9-2969-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:42099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774567147, "uuid": "3040613f-296a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4view.usurylocomotive.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774567447, "uuid": "e2dfc6a3-296a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1proc.diversityvent.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774567627, "uuid": "4dea8ed8-296b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:50391/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774567749, "uuid": "96da3a74-296b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2point.diversityvent.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774567936, "uuid": "0641b167-296c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.24.29:38187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774567999, "uuid": "2c2cbb04-296c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.85:32964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774568109, "uuid": "6d40f25b-296c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3view.diversityvent.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774568425, "uuid": "29e949c0-296d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.204:36173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774568525, "uuid": "65adf879-296d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.163.34.244:26994/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774568713, "uuid": "d53154c8-296d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.diversityvent.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774568839, "uuid": "20c531b5-296e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:42099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774568889, "uuid": "3e95cc5e-296e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.patronageshelk.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569017, "uuid": "8aa38b3b-296e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.47:44400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569125, "uuid": "cb27058c-296e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:50391/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569365, "uuid": "59e52dcd-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.177.26.196/files/rdx/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569366, "uuid": "5aa0a51d-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.patronageshelk.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569373, "uuid": "5ea2ad1e-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.131.13:47739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569378, "uuid": "61f34f6b-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.34.240:52094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569427, "uuid": "7eda5b90-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.252.88:50461/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569427, "uuid": "7ef67097-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.252.88:50461/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774569499, "uuid": "a9c47c47-296f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.24:47010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539725, "uuid": "56fd8544-292a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "0islm.foxglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507025, "uuid": "34b197ed-28de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "0rrpdvc.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774523164, "uuid": "c8297c58-2903-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "0sta343.aurorift.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507865, "uuid": "2943f0bb-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.160.62.234", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774520585, "uuid": "c6b97d49-28fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.33.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774569485, "uuid": "a16af09a-296f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.76.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774527908, "uuid": "d3faae90-290e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.21.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774564564, "uuid": "2c580d16-2964-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.52.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774564505, "uuid": "0953063c-2964-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.123.45.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507384, "uuid": "0ac93e52-28df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.198.132.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519265, "uuid": "b3e32f8e-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.248.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774546204, "uuid": "6d064c2c-2939-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.219.156.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774544765, "uuid": "132f07f0-2936-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.238.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549565, "uuid": "40618fcf-2941-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.113.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497964, "uuid": "1b99f2f2-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.39.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541825, "uuid": "3ab33243-292f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.112.201", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774523405, "uuid": "58189f37-2904-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.112.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494844, "uuid": "d84f6973-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.192.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774517406, "uuid": "602530ee-28f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.183.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774567924, "uuid": "ff23d57e-296b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.24.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774520284, "uuid": "13a0ce9a-28fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.32.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774520044, "uuid": "84850279-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.36.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774532824, "uuid": "45fa8d73-291a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.197.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492143, "uuid": "8e75a8ee-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774563607, "uuid": "f1c8ddb3-2961-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.114.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774490165, "uuid": "f2edea22-28b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.12.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489324, "uuid": "fe0d5500-28b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.12.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774568406, "uuid": "1ec9c8d7-296d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.15.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485544, "uuid": "3111d0fc-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.32.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774499464, "uuid": "99f09091-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.37.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508824, "uuid": "64c22145-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.63.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774531506, "uuid": "348e9e9c-2917-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.27.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561925, "uuid": "0755bc23-295e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.28", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495625, "uuid": "a99e042a-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.238.240", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774486925, "uuid": "680094e2-28af-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.208.62", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518306, "uuid": "78950973-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.167.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510324, "uuid": "e2ec4946-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.157.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516864, "uuid": "1d2e0b6f-28f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.254.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774524306, "uuid": "70b80b71-2906-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.205.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774546684, "uuid": "8b277a4c-293a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.137.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511406, "uuid": "67d3c02e-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.176.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774517885, "uuid": "7d5df445-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.224.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774509725, "uuid": "7d9e3ee5-28e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.245.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774543205, "uuid": "71ac6c60-2932-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.97.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774530065, "uuid": "d9393c9e-2913-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.252.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774501745, "uuid": "e95c9156-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.123.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774521125, "uuid": "088a4496-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.10.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512364, "uuid": "a2e3785f-28ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.80.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539124, "uuid": "f120873b-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.105.56", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541886, "uuid": "5f4455ca-292f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.31.221.96", "Tag": [ { "name": "GBR", "colour": "#56a1e9", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774486206, "uuid": "bb52c53f-28ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.48.123.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539185, "uuid": "15b4272c-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.148.183.75", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774533484, "uuid": "cfa15c39-291b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.83.13.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485964, "uuid": "2b6ebed7-28ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.11.89.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774565405, "uuid": "21b4605c-2966-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.87.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774501745, "uuid": "e95c84cd-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.157.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518245, "uuid": "54402869-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.41.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774491843, "uuid": "db61efba-28ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.82.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539185, "uuid": "15a1c44b-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.15", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541045, "uuid": "6a0af267-292d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774566723, "uuid": "333481f0-2969-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.163.34.244", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774569363, "uuid": "58e7e877-296f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.34.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518426, "uuid": "bfce26fb-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.234.94", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774500724, "uuid": "889e808a-28cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.165.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774503725, "uuid": "855287ec-28d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.80.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774548364, "uuid": "74ae8647-293e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.46.32.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539185, "uuid": "15ab37be-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.143.196.35", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774490524, "uuid": "c975a802-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.205.226.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539124, "uuid": "f1209245-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.166.173.36", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774559345, "uuid": "05d1ce30-2958-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.177.26.196", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508824, "uuid": "64b9ef17-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.227.183.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539124, "uuid": "f1351004-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.47.45.118", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774522924, "uuid": "391b92f2-2903-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.97.192", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774564864, "uuid": "df94764b-2964-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "207.231.107.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539124, "uuid": "f11f0769-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "209.38.18.1", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549937, "uuid": "1dfcae7c-2942-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.208.164.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518485, "uuid": "e37a1bf0-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.202.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492744, "uuid": "f46fe535-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.154.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774521784, "uuid": "91dc9d2d-2900-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.1.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774534624, "uuid": "7726b13a-291e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.190.247", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542308, "uuid": "5ac6b2a4-2930-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.248.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774527606, "uuid": "1fb48e7c-290e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.160.220.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516864, "uuid": "1d2e0dc3-28f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.105.50.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774554965, "uuid": "d2f6f64e-294d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.251.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774557064, "uuid": "b60b7625-2952-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.157.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519385, "uuid": "fbeb7e13-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.201.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485544, "uuid": "311233a2-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.197.137.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774535047, "uuid": "72b95cd9-291f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.21.26.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549325, "uuid": "b146b805-2940-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.115.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774522985, "uuid": "5d801a2e-2903-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.127.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492685, "uuid": "d131d7cf-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.85.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774524544, "uuid": "fed38f5e-2906-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27tjfer7.cinderpeak.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553884, "uuid": "4ed4c5e3-294b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.57.201.154", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774522325, "uuid": "d41b3e8d-2901-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.40.148.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774529825, "uuid": "4a59109e-2913-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.67.93.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537324, "uuid": "c060e330-2924-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.68.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510444, "uuid": "2a4baebd-28e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.17.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774502825, "uuid": "6ce04a70-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.50.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774569363, "uuid": "58e769a4-296f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.131.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774538106, "uuid": "9207f7e9-2926-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.126.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774484165, "uuid": "fb30385d-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.217.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774544344, "uuid": "187881d9-2935-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.47.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774499764, "uuid": "4ce5f985-28cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.46.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774534984, "uuid": "4d632696-291f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.72.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516325, "uuid": "db81a9c5-28f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.78.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774525506, "uuid": "3bda4872-2909-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.225.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483806, "uuid": "250430c1-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.144.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774500425, "uuid": "d6b098bd-28ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.7.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774550525, "uuid": "7c60289b-2943-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.139", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774533965, "uuid": "edd895ef-291c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.5.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774547824, "uuid": "327cf88d-293d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.9.85", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774515725, "uuid": "75e7f32f-28f2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.177.33.135", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519864, "uuid": "196bbd6f-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4jv9.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537985, "uuid": "4a04b93f-2926-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "55wmwoni.bramblepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774500306, "uuid": "8fbfa3ff-28ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58edm.greenpit.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539124, "uuid": "f11ff355-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.106.78", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536306, "uuid": "61301770-2922-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.170.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774556164, "uuid": "9d915bdf-2950-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.4.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561925, "uuid": "0755cab0-295e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.52.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774569424, "uuid": "7d2c118a-296f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.252.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774550045, "uuid": "5e47fd19-2942-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.91.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487824, "uuid": "7fdb946a-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487824, "uuid": "7fdb827f-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.177.122", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774491665, "uuid": "711a372a-28ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.181.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492384, "uuid": "1dd0fbe1-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.82.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774533245, "uuid": "40dd05e2-291b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5hff.ra8gera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541047, "uuid": "6b58a0da-292d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5p4r2-forge.foxglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774505884, "uuid": "8ca206ea-28db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5par-stream.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537025, "uuid": "0df7ac34-2924-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5sxuqx.fabledock.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549024, "uuid": "fdf9bedb-293f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.162.220.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541524, "uuid": "87c58f4c-292e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.20.51.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774501924, "uuid": "54460183-28d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774529224, "uuid": "e459dcc3-2911-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.24.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536784, "uuid": "7e80c652-2923-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774517824, "uuid": "596ba3ea-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.43.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774513025, "uuid": "2c93b4ef-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.105.142", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774517406, "uuid": "60251ca3-28f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.153.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774569005, "uuid": "837f5912-296e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.74.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774490105, "uuid": "cfb4dd39-28b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.98.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774525624, "uuid": "8286140b-2909-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.7.184.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774531206, "uuid": "81800726-2916-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "6u0py.tires8f.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774515064, "uuid": "ec2e1f7a-28f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.89.224.210", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774511344, "uuid": "42f66988-28e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.217.208.93", "Tag": [ { "name": "ChromElevator", "colour": "#32fb3c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774512725, "uuid": "79f24fda-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.198", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774513145, "uuid": "7468f68b-28ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.249.228.212", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508824, "uuid": "64b9faaa-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.106.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539124, "uuid": "f1233193-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.217.248.44", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774521425, "uuid": "bbc31634-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ads-storage.biz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508824, "uuid": "64f20964-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "akl1.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774517524, "uuid": "a676c733-28f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ampsyst.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539196, "uuid": "1c01d9ae-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "apesecurity.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539186, "uuid": "15f34dcd-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "athome-srw.s3.us-west-2.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774535284, "uuid": "0066c3b4-2920-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bridgecampa.x7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539188, "uuid": "17766db2-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "brsrys.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774520885, "uuid": "79fcd6d8-28fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "buildwar.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518785, "uuid": "95e829fd-28f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0rte8-flow.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774502706, "uuid": "26195680-28d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cav33-phase.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774529944, "uuid": "91715934-2913-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cedargri.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774567444, "uuid": "e0d31b29-296a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1proc.diversityvent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774491906, "uuid": "00d10eea-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1proc.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774552444, "uuid": "f45f83e3-2947-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1proc.wildbranchcluster.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774562045, "uuid": "4f413326-295e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1store.cruciferdiesel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485544, "uuid": "31295ccb-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1store.greenpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774547044, "uuid": "61ce4ba4-293b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1store.silverstreambuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774567746, "uuid": "9521cea2-296b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2point.diversityvent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492263, "uuid": "d5f5b298-28bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2point.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774552684, "uuid": "83875fd3-2948-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2point.wildbranchcluster.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774562405, "uuid": "25d08bf3-295f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2remote.cruciferdiesel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485844, "uuid": "e3cbf376-28ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2remote.greenpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774547345, "uuid": "150b207f-293c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2remote.silverstreambuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774563010, "uuid": "8e415f32-2960-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3dev.cruciferdiesel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774486326, "uuid": "03309f08-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3dev.greenpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774547645, "uuid": "c7e52d88-293c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3dev.silverstreambuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774568105, "uuid": "6b5bac07-296c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3view.diversityvent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774492685, "uuid": "d13affeb-28bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3view.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553044, "uuid": "5a4b710d-2949-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3view.wildbranchcluster.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774563185, "uuid": "f67ce489-2960-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4link.cruciferdiesel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774486745, "uuid": "fc9086fb-28ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4link.greenpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774547944, "uuid": "7a450fc2-293d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4link.silverstreambuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774568707, "uuid": "d21eb0e1-296d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.diversityvent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774493044, "uuid": "a73e88d2-28bd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553344, "uuid": "0cf9a6eb-294a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.wildbranchcluster.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774520106, "uuid": "a931cada-28fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clie-zone.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539187, "uuid": "16809679-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crossroadbuild.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774503129, "uuid": "2232b228-28d5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crypt0-vector.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774522206, "uuid": "8d4fe3a9-2901-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crystal-bridge.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774504506, "uuid": "56f91a89-28d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d34l5-well.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518426, "uuid": "bfe11366-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "daemon6-logic.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541346, "uuid": "1d4aed2a-292e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "demandnod.cl0verbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516565, "uuid": "6a937152-28f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "depdea.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774548305, "uuid": "515e6d0a-293e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.blackpeakstorage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774563365, "uuid": "61ca2c0e-2961-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.investonerous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774553706, "uuid": "e4927f13-294a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.ironrootprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487105, "uuid": "d3822285-28af-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774493465, "uuid": "a215d7c4-28be-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774568887, "uuid": "3d580fab-296e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.patronageshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774554065, "uuid": "ba8724fc-294b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.ironrootprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774493884, "uuid": "9c27e055-28bf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774569363, "uuid": "58f9dec1-296f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.patronageshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774548664, "uuid": "27a0cf6b-293f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2power.blackpeakstorage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774563725, "uuid": "383688b3-2962-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2power.investonerous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487586, "uuid": "f2474f0b-28b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2power.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774554424, "uuid": "9091b573-294c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3field.ironrootprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494305, "uuid": "96bcf68a-28c0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3field.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549024, "uuid": "fe04bf47-293f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3local.blackpeakstorage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774564084, "uuid": "0e872203-2963-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3local.investonerous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774487885, "uuid": "a40f6b1c-28b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3local.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774554784, "uuid": "672a6199-294d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4space.ironrootprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774494724, "uuid": "90d234df-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4space.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549327, "uuid": "b2886a0c-2940-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4work.blackpeakstorage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774564447, "uuid": "e6bf2c5c-2963-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4work.investonerous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774488304, "uuid": "9e4394e2-28b2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4work.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774506306, "uuid": "87ff2911-28dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "directdrive.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774532947, "uuid": "8f6c1e58-291a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "eastretainer.ra8gera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539125, "uuid": "f1a0f08c-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "eglimermailer.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540025, "uuid": "09e642c7-292b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ekdt78.foxglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539129, "uuid": "f445a73c-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "etinsendmail.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539128, "uuid": "f37abb04-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "etinsendmail.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539196, "uuid": "1bfca276-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "etinsendmail.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536664, "uuid": "36c007a3-2923-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ewdgyl.fabledock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774556346, "uuid": "0a38c861-2951-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.bluepointterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496825, "uuid": "749c0b06-28c6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774560725, "uuid": "3c0ab4ce-295b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.angularsilic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483924, "uuid": "6b7b0cf1-28a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774545784, "uuid": "72fcf657-2938-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.goldenridgesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774551007, "uuid": "9ba62249-2944-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.coldstonemetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774490285, "uuid": "3a9beeef-28b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774566124, "uuid": "ce8a8bb5-2967-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.usurylocomotive.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774551364, "uuid": "70e64fe5-2945-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2core.coldstonemetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774490644, "uuid": "109648b2-28b8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2core.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774566424, "uuid": "8115787f-2968-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2core.usurylocomotive.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561084, "uuid": "1275d997-295c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.angularsilic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774484285, "uuid": "42413776-28a9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774546204, "uuid": "6d1428ad-2939-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.goldenridgesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774556706, "uuid": "e0b6c359-2951-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proxy.bluepointterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497184, "uuid": "4b09b2ea-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proxy.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774557124, "uuid": "da1bd3d5-2952-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3data.bluepointterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497544, "uuid": "21522cba-28c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3data.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561625, "uuid": "54928742-295d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.angularsilic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774484706, "uuid": "3d3f79e2-28aa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774546384, "uuid": "d840b85a-2939-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.goldenridgesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774551724, "uuid": "477f202a-2946-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3ghost.coldstonemetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774491006, "uuid": "e84e16db-28b8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3ghost.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774566785, "uuid": "58487a15-2969-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3ghost.usurylocomotive.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774557425, "uuid": "8d160742-2953-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4point.bluepointterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774497906, "uuid": "f956606c-28c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4point.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774561865, "uuid": "e394dbf0-295d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.angularsilic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774485064, "uuid": "12c7089e-28ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774546684, "uuid": "8b383373-293a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.goldenridgesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774552024, "uuid": "fa511cda-2946-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4view.coldstonemetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774491424, "uuid": "e1ae07d9-28b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4view.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774567144, "uuid": "2e780294-296a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4view.usurylocomotive.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539128, "uuid": "f37b048e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "femilamom.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536306, "uuid": "615ab282-2922-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ffzt1.fabledock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539188, "uuid": "173b459b-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "files.codecguide.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774530245, "uuid": "449ef1c9-2914-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fj0r-stream.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774541947, "uuid": "83bc48b5-292f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fjordhard.cl0verbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498385, "uuid": "167a72bf-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flamemarket.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539186, "uuid": "16247e11-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "forlifemanagment.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507266, "uuid": "c470b36a-28de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "freightvalley.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774530545, "uuid": "f78757ee-2914-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fuddj2yd.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542367, "uuid": "7dc73a1f-2930-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-4mp.cl0verbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539186, "uuid": "163d8098-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gerlimeri.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539125, "uuid": "f18c18b7-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gerlimeri.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774517825, "uuid": "59f441b8-28f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "glacier3-signal.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774543023, "uuid": "051264f9-2932-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gu4r2-field.cl0verbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539186, "uuid": "163e1b76-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "halflifeagency.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774501924, "uuid": "5450d9a8-28d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ic3-frame.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774538345, "uuid": "20ba855a-2927-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "inkchec.bramblepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774529585, "uuid": "bb3dbde8-2912-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "irgss.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537565, "uuid": "4f90eaf5-2925-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kernmetri.fabledock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510505, "uuid": "4f081c20-28e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l0ad-mark.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519445, "uuid": "1f826ffa-28fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "looseoak.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539186, "uuid": "1617abd0-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "macandcheeseagent.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539187, "uuid": "1680b3be-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mariosmanagmentsec.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539196, "uuid": "1c01d253-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "marketingsuperstar.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774522506, "uuid": "40318853-2902-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-spireis.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774521484, "uuid": "df15f4c1-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mermarkal5.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774538647, "uuid": "d4e35ca9-2927-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mertide3on.bramblepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774526224, "uuid": "e824d266-290a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-5udde.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539125, "uuid": "f15cf86e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "minecraft-java-scanner.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539188, "uuid": "175c9661-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mnsm.us.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507865, "uuid": "29582349-28e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "move-friendly-international-observed.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774516925, "uuid": "4165a0e7-28f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "narr9-vector.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774499106, "uuid": "c48cc770-28cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neuron-graph.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774519085, "uuid": "48b8a027-28fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nfqbq5.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774533967, "uuid": "ef7beb55-291c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimb3-reach.ra8gera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539189, "uuid": "17b8223f-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "onlinemoneyagency.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539187, "uuid": "16925c28-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "onlymediumsteak.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540685, "uuid": "939141df-292c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "op3n-bridge.foxglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774528565, "uuid": "5b26ac92-2910-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orchestheo.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774536005, "uuid": "ae0b3fd7-2921-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "otter-aut.x7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774529286, "uuid": "08dddf17-2912-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p0lar-mark.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774521184, "uuid": "2be849f7-28ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "peta-cre.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774525564, "uuid": "5e891a19-2909-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "plain-ivo.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774534325, "uuid": "c485e193-291d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "plas2-graph.ra8gera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774524845, "uuid": "b21dad6f-2907-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxyspe.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774518125, "uuid": "0ce1600e-28f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pten.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539193, "uuid": "1a783bcd-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-43852e2f13f44540903efdf59f8a7582.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774499525, "uuid": "be005eb9-28cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pubserv.darkbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774522806, "uuid": "f2862d08-2902-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quanpuls.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774501084, "uuid": "5f5b075e-28d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorcresta.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774532286, "uuid": "0551a75f-2919-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r1ch-node.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774502345, "uuid": "4ec88886-28d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "railvalidator.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774504025, "uuid": "3872cee5-28d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rain-wave.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539197, "uuid": "1c90a710-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "redhairsyndrom.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774537808, "uuid": "e0797d30-2925-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rendfie.fabledock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539606, "uuid": "107f01f6-292a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "river-fle.bramblepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774524185, "uuid": "2899f00d-2906-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnolecu0-drive.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774535647, "uuid": "d8c68e64-2920-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "royalgla.x7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774523825, "uuid": "51e0250c-2905-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "runw-maj.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774520524, "uuid": "a2cd85b9-28fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s75g160.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774523525, "uuid": "9f44120e-2904-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scantermin.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774509545, "uuid": "12c8f37a-28e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sercresta3.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539196, "uuid": "1c0b7e8c-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "server.admirableskreen.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774528265, "uuid": "a8bf1d82-290f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shelldecode.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774530907, "uuid": "cf23e4e1-2915-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sign-live.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774531625, "uuid": "7b037ecc-2917-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sket-stack.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774521845, "uuid": "b5da7ca1-2900-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "smaton.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774527245, "uuid": "48d0de6a-290d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solidmount.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774527908, "uuid": "d407e98f-290e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stocforg.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774503544, "uuid": "199d5b13-28d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "storapowe.sunnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774507686, "uuid": "be4a9b86-28df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "suddencul.greenpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539187, "uuid": "16b645e4-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "surfandsharksaged.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774564984, "uuid": "27153c6a-2965-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1infra.secretgeneral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774488724, "uuid": "98911fe8-28b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1infra.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549624, "uuid": "63bd7269-2941-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1infra.whitetideinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774555084, "uuid": "1a2a7798-294e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1proc.darkcloudgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495144, "uuid": "8b160d19-28c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1proc.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774559345, "uuid": "05fd19ce-2958-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1sync.donkeyemploy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774544284, "uuid": "f4b25116-2934-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1sync.frozenleafnetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774565166, "uuid": "93268f0d-2965-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2base.secretgeneral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489085, "uuid": "6f799aba-28b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2base.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774549990, "uuid": "3d7cb1aa-2942-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2base.whitetideinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774559764, "uuid": "ff7309bb-2958-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2data.donkeyemploy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774544884, "uuid": "5a43f3be-2936-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2data.frozenleafnetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774555384, "uuid": "cd0a5cec-294e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2steel.darkcloudgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495565, "uuid": "85ccd0f9-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2steel.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774555743, "uuid": "a2ca89d5-294f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3core.darkcloudgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774495989, "uuid": "827804bc-28c4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3core.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774560064, "uuid": "b25403eb-2959-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3edge.donkeyemploy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774545124, "uuid": "e9a3855d-2936-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3edge.frozenleafnetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774565405, "uuid": "21c2e8b5-2966-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3user.secretgeneral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489444, "uuid": "45b90df6-28b5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3user.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774550585, "uuid": "a0264390-2943-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3user.whitetideinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774565764, "uuid": "f784a6c7-2966-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4link.secretgeneral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774489864, "uuid": "3f8ccbcc-28b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4link.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774550765, "uuid": "0b6db699-2944-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4link.whitetideinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774556105, "uuid": "7a618395-2950-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4sat.darkcloudgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774496645, "uuid": "0986220f-28c6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4sat.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483504, "uuid": "71179941-28a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4static.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774560425, "uuid": "8973207e-295a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4static.donkeyemploy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774545544, "uuid": "e3b80f8d-2937-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4static.frozenleafnetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774533605, "uuid": "1786e18e-291c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-markal.ra8gera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774542126, "uuid": "ee4a10e8-292f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tar973lz.cl0verbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774531924, "uuid": "2dadae25-2918-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "torship.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774510863, "uuid": "24160f1e-28e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr1g-cache.blugrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774501506, "uuid": "5ad1da3f-28d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trans5-ring.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774525144, "uuid": "6478a860-2908-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tricorear4.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774534625, "uuid": "77398784-291e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tricrest7ar.x7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774500724, "uuid": "88aaffb5-28cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tritideor3.northoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774526585, "uuid": "bf615f5f-290b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-5un.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774526945, "uuid": "95b0e80d-290c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultrbird.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774534925, "uuid": "2a07ab71-291f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unload6-gate.x7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774540325, "uuid": "bcafa233-292b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uppxbwm.foxglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774538944, "uuid": "86018d0f-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v3ct4-loop.bramblepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774499943, "uuid": "b7695ac3-28cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaul5-vault.greenpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774508824, "uuid": "64d2d02c-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vdyrne1g.westpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774529165, "uuid": "c1253175-2911-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-tideal.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774532585, "uuid": "b7abaa7c-2919-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "velcrest4is.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774509067, "uuid": "f58d9329-28e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "velg.deepoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774498684, "uuid": "c8ebf23e-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "w8nzz58.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539125, "uuid": "f15eda6e-2928-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-captcha.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774539186, "uuid": "15dd2e4e-2929-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wesneet.it.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774505405, "uuid": "6f1df1ac-28da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "woonort.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774527545, "uuid": "fb764aff-290d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xr71purq.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774504984, "uuid": "74355119-28d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xun7.redbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774509965, "uuid": "0d1114d6-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-fluxex.oakcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774525865, "uuid": "11fc7167-290a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-valeet.crestfall.in.net" } ] } }