{ "Event": { "published": true, "date": "2026-04-19", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-19", "timestamp": 1776644128, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "9d3cfae3-0eb0-4c79-b538-b6feb3977eac", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95cbda34-3b83-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776557176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557176, "uuid": "5ea7088e-bea8-48f6-b6bc-b802598f5839", "comment": "Malware payload", "value": "3b8890ecae55953693870524845e57c1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557176, "uuid": "9adbb4ed-beee-4fb4-8eef-4cf425032479", "comment": "Malware payload", "value": "7850f6bf33609593b790e274080b2dc69d7e368037077d47e8bcb0c6a287a1cd", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557176, "uuid": "2db47968-96bb-43d8-a037-3ee8a02a6d63", "value": "T155B66C177A69E70EC61422301EB1DA94676A0C9601D7A527B355F309FAF30BC8A6FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557176, "uuid": "ef1400d5-868a-4146-8a2c-64ec41e220cc", "value": "98304:yhtd7ieQLkDpYxnUjEwm7eIrmpViQu6HMRKm+m3yfV:std8kwnvwm7gFLTY3yd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776557176, "uuid": "a2c1bd77-3b11-4e47-8706-e35271c2be9d", "value": 10986707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557176, "uuid": "5bb82ee7-5020-45f5-b292-fd0bdae16d82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776557659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557659, "uuid": "c4deb079-31d2-47ff-bc30-2f4ae2c23886", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557659, "uuid": "faf9a082-fefc-4aec-916c-40db15f4925d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557659, "uuid": "f4ce5580-e6ff-4500-ac3b-b9ff68c9dd28", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557659, "uuid": "dafa1361-e5cb-4835-9fc9-30c060c54d78", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776557659, "uuid": "efba834f-3c49-4bd5-9252-c5da2a6be090", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776558857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558857, "uuid": "eb861e99-decc-4609-89fb-a1696ea1e230", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558857, "uuid": "2abfcc21-18bd-4297-8df3-5f8c90643ffe", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776558857, "uuid": "87a57cf8-8826-48f3-a53b-1de420d063b4", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776558857, "uuid": "a741d987-b015-4f8e-981f-c7edc30953cf", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776558857, "uuid": "3d54d7bf-d9e0-4093-a887-3bbf53693e69", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776559271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559271, "uuid": "1e6d2671-15b1-4400-b676-369ce655b22a", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559271, "uuid": "c6975570-973e-4d84-a8be-ecd8c08d1666", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559271, "uuid": "e67b6cfc-f99c-412e-9d24-da314ce50e61", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559271, "uuid": "e8a1aed6-1909-4b4c-b9fd-33ebeade2fa3", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776559271, "uuid": "3a6326b1-58ec-4366-b39c-94fab3b4770b", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776561498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561498, "uuid": "a18f05ee-8be1-4f01-80a2-0ff132980955", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561498, "uuid": "021fec8c-d6ba-463a-8bac-1c1c0c78952b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561498, "uuid": "f82b0dd7-c00f-4f81-88b6-3a10d11b49ad", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561498, "uuid": "74db5f03-8571-4b6a-b22b-7433961ccb8e", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776561498, "uuid": "533cf3eb-223d-416f-bc28-ff506e40aa27", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776568458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568458, "uuid": "d1a8c028-7982-40a4-89e6-e9c25f3cbc6d", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568458, "uuid": "dd783678-050c-4192-8e38-cf7e5ea5b0fe", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568458, "uuid": "04d20ebd-4bbb-4f27-8a08-5f523f262747", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568458, "uuid": "96846ad0-c7e4-41f6-ac44-62fb46c2bb5d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776568458, "uuid": "9f366720-7985-42b1-8979-8354548e8db9", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "826cf86c-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776573035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573035, "uuid": "9140cbf3-5180-464b-81d3-c22211277266", "comment": "Malware payload (Mirai)", "value": "af751937459c0c14f020e633723a0d6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573035, "uuid": "e099c280-1bff-470e-9f2b-6ceae5d89c47", "comment": "Malware payload (Mirai)", "value": "b927020d009eade59e1b679162f57995aaf54b96e5a0cc631d81f404091cc3e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573035, "uuid": "67e1c88c-a9f7-46c4-a73c-eecf23e2f038", "value": "T19734623A9958DA9BE53156BD53FA8F3ACA7E33D72341CD41BDDC903049A4A8F280BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573035, "uuid": "3e59fad2-8b69-46f8-bbbf-f2d7e33ec027", "value": "6144:5WJIGlPaN+wcqYuKSFLGQBb0dKWlAbizlR/V6tuJ34NI4/xSME3YdwUTp7Ty:W3Ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776573035, "uuid": "edd01999-8f21-4768-9393-d0c832facf6c", "value": 232288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573035, "uuid": "b48b1a81-4d07-454c-b508-182d08e9066d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad98058a-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776573107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573107, "uuid": "878fa951-5834-428a-9242-3db6b393d2d5", "comment": "Malware payload (Mirai)", "value": "cc40e161d86df196dd50199630904893", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573107, "uuid": "2a3aae27-4a99-46f2-93b1-a3ccde9fb4f8", "comment": "Malware payload (Mirai)", "value": "025bfef806662c34ca8a3b17219854e4c277b0f1a27de0bf1f3e922d17fbb2b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573107, "uuid": "09497462-8f1e-41bd-a657-59822347802e", "value": "T1F9142DB2C44DC5D7C922127C61A9AF7BCE3EB2EB1709CD02BED4643089C5E9B7A16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573107, "uuid": "05632e39-69b0-4f12-9391-97d648e479d6", "value": "1536:PXMMqwKAw/AHUxIWLVm9jAzNxHfYCLfiWlaLoeBgm5PTliK+pK7DKrtwp+Vp+wEg:0MqwKA0wWHfXLq8a8aPTgs6ZuytFDf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776573107, "uuid": "76c40c64-8e09-4b75-8f18-28bf9ca76ed7", "value": 194444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573107, "uuid": "518bd3d0-6408-4880-b587-5364a10f0e11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3fd6bfd-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776573172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573172, "uuid": "4bdaa84b-18bd-4989-80cf-f7ffe50a6c2d", "comment": "Malware payload (Mirai)", "value": "de967d1c76068cc8a06edb56ac3c4331", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573172, "uuid": "2fd31e0a-fee9-43f1-a6d0-62ecf5c96aaa", "comment": "Malware payload (Mirai)", "value": "1f2553a51260340b846fcef1afc358c2207cf69d22f85e166e36e8d8ac630b15", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573172, "uuid": "a3151604-648e-40af-8c6b-718704f415bd", "value": "T1D054C661D54CC983C163167DA1EE9FAAAB3B73DA2786DE017C9466702AC2FDB1D07C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573172, "uuid": "40528b37-d728-47f5-a692-14bb98c1d407", "value": "6144:HYXyjzP+r+awON7QiAuAITp7dPieGM/9Jm7wMVkgQ4:HLPPs+awON7QaZfn/nm75VkgQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776573172, "uuid": "870451e6-2845-46cd-95fa-68b616c88196", "value": 291616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573172, "uuid": "f3433796-1d49-4d8a-baad-93671a2717d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ee295c6-3ba9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776573432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573432, "uuid": "cf938032-791e-4a65-8530-6459abdb3c91", "comment": "Malware payload (Mirai)", "value": "798f8340dab65410f3caf397bdffd7eb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573432, "uuid": "c1d14d7a-e692-46b7-8964-b7aff280863d", "comment": "Malware payload (Mirai)", "value": "ca8eb07779893526758e8004e3489207a825c094bf642d0cf8c4b31585f066bd", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573432, "uuid": "2d53fc38-fc86-42f4-8232-693d1c98c614", "value": "T197245171D48CD983C563217DA5EC9FAFAA3E73EA6789DD027C9465304AC6E9B1C0BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573432, "uuid": "8c972cab-534b-4093-a55a-96bc306a3b6e", "value": "3072:MusF0MgMOo9q/Nkaw45MvgFG6dCZTlH74:MusFuMOdka55MECZTp74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776573432, "uuid": "c3fe0784-1897-40ee-b40e-e0502133c483", "value": 215116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573432, "uuid": "b0474828-223d-4012-8532-69cc1607803d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33ce8dff-3baa-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776573762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573762, "uuid": "86c6116d-976a-4831-b819-910404f0b178", "comment": "Malware payload", "value": "4b94cf85619004d8656fad808fe65d12", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573762, "uuid": "4079fefa-7b82-4d7a-bc48-7ec81147aa7c", "comment": "Malware payload", "value": "89421459a6e8decb89f4863fd32e13f6f5436ba87d1f31df6daac3eca0f8ba01", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573762, "uuid": "163bb3f5-2f24-47a7-beba-4f265640afea", "value": "T14793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573762, "uuid": "51dd9998-411d-4ff4-b8b8-54a74c21c800", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX0IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776573762, "uuid": "3f6654ca-060a-4a9e-aa11-748374497f06", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573762, "uuid": "9e083448-46f2-4f2c-9270-80bd04e9056a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77280af7-3baa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776573875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573875, "uuid": "454d6c12-7408-4fe2-bec8-b2c552871fca", "comment": "Malware payload (Mirai)", "value": "ae264f9096811e3eb69973e00fb98360", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573875, "uuid": "ef78a83b-c879-44d7-8fb7-193d748d9d39", "comment": "Malware payload (Mirai)", "value": "9794a9e6403b12f28526270712855bdbcf8caded5a465ca1e7df892f3817e961", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573875, "uuid": "6da2cbb7-2447-4518-b112-e9112da24f4c", "value": "T1B53465759B5CCD97C42ADA7E11E98F6B9C7D72DB2205EE127CF49034EA85A8B2C43C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573875, "uuid": "93e8116a-3b0c-4a7e-a847-13f20ef95f22", "value": "1536:KRq9mjxJsjn81ELYMAZefaMPjM+NLsBbiTFK+pK7DKrtwp+Vp+wEibLH7NiTKnh:uymyLYX/8bTlH7NiT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776573875, "uuid": "ef20fd3a-3389-4cfb-b1a0-bf1a9ed4aa1a", "value": 232288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573875, "uuid": "ff3d45ee-86b7-47bb-b6c4-60fc13f7653a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cde95dd0-3bab-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776574450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574450, "uuid": "33dcba44-b506-4e7a-b7ba-d1d83216520d", "comment": "Malware payload", "value": "fb08acbf3d0d095677c418055f04a8d4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574450, "uuid": "5f833484-6aae-4293-b43a-f830b4a2f7ae", "comment": "Malware payload", "value": "3f46d488590a679956b194f12655aafc6a6bdc53d2fea370e1d25a2ba800395f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574450, "uuid": "311a1011-a685-4089-8b58-f7d28915e9a3", "value": "T15E931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574450, "uuid": "6793e332-deaa-4c06-b1e4-acf1ba51cee8", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKL0sCxK/oh:n8iIL0GitkbFv2v05xLkrK0sCx0oIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776574450, "uuid": "91993754-11c8-492f-83e7-c9479087096a", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574450, "uuid": "92e1a441-5688-49f6-a4b3-e582f4e96f92", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c7f59bb-3bae-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776575656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575656, "uuid": "fd3ba0a8-79dc-44fc-81e7-bc1ad4da3149", "comment": "Malware payload", "value": "d995701cf5f5dd3c1858309456cfecab", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575656, "uuid": "b7792560-e1ef-477e-9742-b844c817273c", "comment": "Malware payload", "value": "bed2f2cfa4d148a9bdcc8ded73f4a884330b08effea8021cb73de0b0193feca3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575656, "uuid": "b83a5350-8b14-497c-816c-7cf8d95f4a55", "value": "T1327533A87A370AA29624153565CD27F7C28BF4B18ECEDEFE3176112794499CA0BC1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575656, "uuid": "135eddba-4af4-4072-a64f-79e89a931fe2", "value": "49152:P0pz7Al2uo4s8rMUzjapbM1/wA/6wokbiqLalQBz0L:P0fAl2u3MbM14A/6tjk0L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776575656, "uuid": "aedab3a6-92b9-4442-b242-689e9efb37e6", "value": 1686409, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575656, "uuid": "7d1ca4e0-bfef-4ff9-84f1-56246ca589f0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c212f96d-3bae-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776575719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575719, "uuid": "fd284176-0861-49b5-b92b-844c8e81533c", "comment": "Malware payload (Gafgyt)", "value": "318bf65afc7d06fbe762feac8bdfcaf3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575719, "uuid": "1d9d38f1-2b6f-4005-b4a4-fedeaf388fd6", "comment": "Malware payload (Gafgyt)", "value": "dbb234915f65bc22e2206bceefe4c7c0916cc1678ecc22cb17136c35232fe724", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575719, "uuid": "06143811-2672-4595-9064-49384d3a0b07", "value": "T1F8145271E88CC983C563117DA1ECDFAEAE3E33DA6385ED027DD0253156C6A9B290BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575719, "uuid": "53118dcc-d2fb-40f5-a0da-b3e684a7fff1", "value": "1536:LHO7CydNe5kbJtQ2YAs0HBzwECDS+HdOpiKvriTFK+pK7DKrtwp+Vp+wEibLH750:DOzdtQ2YbQ+iuTlH71G51", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776575719, "uuid": "4ac2a5fb-863a-4844-b249-02397716c995", "value": 204088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575719, "uuid": "dcf94fbd-8dcd-463f-addb-a77cfb774b07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83465ca8-ba40-11f0-b161-82aee05be84a", "comment": "Malware payload (DarkSideRAT)", "timestamp": 1776575977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575977, "uuid": "12a30a72-4318-4a44-8f7d-6553f42782c2", "comment": "Malware payload (DarkSideRAT)", "value": "416275bb02a22efbf68717c00046dee3", "object_relation": "md5", "Tag": [ { "name": "DarkSideRAT", "colour": "#4f60a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "txt-to-exe", "colour": "#aa5c02", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575977, "uuid": "8a10ec36-4783-47e4-8246-400612a51dba", "comment": "Malware payload (DarkSideRAT)", "value": "f63ee52cf8bc3a075eddddeaa198ddb3bff5adf3da41dcc68f28a4e1ca2cd506", "object_relation": "sha256", "Tag": [ { "name": "DarkSideRAT", "colour": "#4f60a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "txt-to-exe", "colour": "#aa5c02", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575977, "uuid": "4bbd1ecb-e955-45d6-98a7-9bf95f1f7a3b", "value": "T1E8832A35CAAEB07ED3299A78DD020D95CF63BC8A0794BF9753E10DE60F96A501F2C5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575977, "uuid": "5bf043b3-522f-4004-b524-9f6f35df4a04", "value": "13202ae6e20dc0e6f8ae3713ee808076", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575977, "uuid": "d1e719f4-2306-4c22-be86-875670ede822", "value": "1536:+KJry/hjDGlrjeNHK3xnmF/MbA9mFYVM0:BW/hDGl/eZblyAM+VM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776575977, "uuid": "d8da034d-ccb2-4ef7-b04e-98af9bbc66c0", "value": 80896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575977, "uuid": "fc8152da-72db-4fb5-9b52-3268e6603687", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4810027-3baf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576233, "uuid": "7addce8a-167f-48ad-bce1-c90cfe85c000", "comment": "Malware payload (Mirai)", "value": "90ae0bc1e900022c95bb85d99c02791e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576233, "uuid": "11123d6f-cc80-4945-bc63-1ff49090860c", "comment": "Malware payload (Mirai)", "value": "a329f1fed00ae7b5ca49e8e6a7c25b3f69e62eaafe75e10a42334f1379ddc7a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576233, "uuid": "76bd0847-f0dd-4edd-b06a-531ac130b8f5", "value": "T1FE144231944CC783C62622BC6DEE9FBBCE7E72E62645CD017CD4953485A1EAB290BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576233, "uuid": "e05cfd64-c9e6-4663-aede-0beb76c7b452", "value": "6144:MRELz8Q4f29P9uHAnoPpRbe+pAb0QcpTp7yL:TcGL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576233, "uuid": "4ca72f89-065a-4eba-a7cf-29b824d1aa2d", "value": 202952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576233, "uuid": "d6f87602-bdae-45ae-864f-d0950033cc64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9eeff7-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "a0e10f00-6ef0-47dd-8651-182442185183", "comment": "Malware payload (Mirai)", "value": "bbf357386183ff6b613852ed3d1fb919", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "01c12963-6203-4d5a-ad24-426daaf8649f", "comment": "Malware payload (Mirai)", "value": "8437ac7916d5b4a906b3669c42e606c45cc37d6b6b04340200ccb6c91b47e004", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "7beca988-3808-4adf-96ff-ecc060c920f3", "value": "T13A539C73C8296E54D59582B4B871CB781B63B48082471FFA5BD9C2BA9083DFCF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "3909f72f-cc3a-46df-a171-6172626aa43f", "value": "1536:JaDwtqKcomlIFZCXaZMYfPkYP6gpK2mP5A/iabC0c/v38Bs/n8a:JwacomlITCXaZMYXkYSgQ2mgiabgXMla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576434, "uuid": "07776faf-fa38-4d1e-9c13-25f51f38c9c4", "value": 64464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "027c0212-655f-4bc2-8c34-12b74522f90f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ca2fcc2-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6cf11106-04d6-46d1-b7c0-518803991baf", "comment": "Malware payload (Mirai)", "value": "0126d82d0593a7fce13bafa78fa5b08c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "8a1d0da4-d3b0-4911-b592-f21948f2cc30", "comment": "Malware payload (Mirai)", "value": "60d7685a5e6621f5e034c41df9cab63b59b71dfa7e4d33cfaad48ae635bcecf1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "dadbd467-9044-4e6a-bb69-4b661c94e4a3", "value": "T1A7735C32B9751D2BC4D0A87A61F30325F2F2478A25ACCA1A7D720D8EBF6565032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "10e07049-df42-4239-846f-4355ff95a103", "value": "1536:jP+SbCGR18pspTH1yDQ2tXXUN95s0xwlWptCMR8/pW:zf4yV8pENP1x6MoW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576434, "uuid": "195d7549-e15a-4b12-ab62-96afaafbd4b8", "value": 78528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "e41b03fd-c8e8-49a6-a1f6-42174fa4b7da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ca71765-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "5de9a7ca-4446-4f08-87d2-f54fef059ed9", "comment": "Malware payload (Mirai)", "value": "9de4d1e3e8a0fbe64b258628c466d5d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "f8ee50aa-3c0d-450d-aa69-c23cfc2d1ed3", "comment": "Malware payload (Mirai)", "value": "c11153eee227929754d0b126741bc29c7fa74feef1b817506aaa62b2c0ccb8a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "a693ca80-371c-42f7-9209-def0fe47a5f1", "value": "T135832A97F400EDBDF80AD77B4453090AB270A3A105830F36A39BB963FD721A45967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "9aa839ce-bb96-4c85-9795-e0b41a2d7485", "value": "1536:quKG91H46gWxYRyRqwwrzPQtav8FjWtFUo/V6OXZJ7/aNSOFmA7ExtX1dT:q5GT3xYRyRqwazPQta6Q9VXXz4FmA7ux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576434, "uuid": "b9a681ca-6719-4c2b-916a-3cb77cf48f53", "value": 81652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "bf7eaed5-86dd-44c8-b8c3-af91632ea370", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cb8db94-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "d82bea89-fa2f-4378-ad89-ec3f022b6a09", "comment": "Malware payload (Mirai)", "value": "b2dcef454b10bd4835a30b9dd3f66d2b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "3aeafae9-3dc2-40f9-902a-ee9983e4bf95", "comment": "Malware payload (Mirai)", "value": "376104146a8be9473b5f459e9db4a6f53cda2ef190177658e51f319ac3984210", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "6f6491ca-3f27-4920-9741-a6e13a046f21", "value": "T1F143F135920B2DD1E8342066F1252863F6D61FBFC0E8153B271A77A8B7CA12E0D785", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "856fa753-0d27-48b2-8b8e-864858050b96", "value": "1536:lbQeUzP+5ke8999pRDP2oQcz6Luy6tlV1nLG:yeUqvSmLd6tlHC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576434, "uuid": "17c593b6-9e5a-4b4f-b3f6-ee651ab9ce09", "value": 60152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576434, "uuid": "5b473050-3e88-43ee-85a5-c2fc700230f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "908d108d-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "4a02d677-7ff4-44fa-9eca-52d28367922f", "comment": "Malware payload (Mirai)", "value": "100aa8fc7900757b992818584ed3b542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "637140f3-f9fb-4e4a-9752-f5181f501ec7", "comment": "Malware payload (Mirai)", "value": "cae854a2e6b41ff1c6ccf74dec41fdf54690eadeeee751b95f09aa38cf09d6a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "1f7960b6-d49c-4010-b773-4bb4333a3f87", "value": "T113F2E034C5FDE9BCC03F79790C9D8A45F982F9512AA53726042962BAAFFB9C43D016", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "cdb569cc-c1b5-418d-8707-617dcedf3f6e", "value": "768:AwS0nQr9tpJEu0annIBqVqVHmwIHWUFtGtzXKTK49AbzPwUx0nZl:rOX80VqVi2otGtzXsWdMZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "9d4bcf14-a7e3-48b9-a3cf-c972f88d505b", "value": 36916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "4bf6075f-f7b9-4f88-a4ca-3eb4bd405e87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90a13f85-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "8da5e182-3ed0-4f4e-a584-9d66116850ff", "comment": "Malware payload (Mirai)", "value": "cb6a59f984c3837ff1664704ca2e22db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "89e2d543-b9c4-4fc8-bbe9-db7d5d91ae0f", "comment": "Malware payload (Mirai)", "value": "1ca57b3e1df5e012ba97a8a75ec2dc6c3ff62c43dd597e57b1168335ca1a9c55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "03d07415-986a-44aa-8743-3c837cd9bb24", "value": "T19303E13C4A0904F4D97AC17BE2ED47A0B136075D1541CE562260F6A7EA0E8EC78E6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "4b8bda11-f427-4dcd-bbdc-429a8ae05e69", "value": "768:cgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P59BihJgGlzDpbuR1Jb:q9xJZZNKNFjBfRUM1izVJux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "17b331c5-4cc4-4a7e-b8a8-3dbac49c911c", "value": 38076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "7d980020-b00e-4cc3-8d49-ea6a5ede3dad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90aba5fe-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "fd8fbe90-084d-4c24-9119-a7339bffb5b7", "comment": "Malware payload (Mirai)", "value": "c813b5ac75ee06348b72d21fbf82fcd9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "d8b23a9a-5954-44d2-b435-d369ed0f66c5", "comment": "Malware payload (Mirai)", "value": "9e1afa28508088238ae48f7c63618e1c2a775efa014d2016b1f81d5f0819800b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "0a0d030a-3ba7-4ebc-9367-ec460c62c71a", "value": "T11803E133A655DE92CFB23831A81E89434F8216FC79FB20A115B5C41DB69B5C4FFA50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "ed368f9b-d3fd-4ee0-bedf-8923259e1601", "value": "768:BhbUpgfK/AwtCpv9kskz5BCG5ljbm76GxRfLXZJ8dtXFLvOQdiQtyIuu8L39q3U6:BxUpgy4p/kz5JXmeGXLXGXF7OyYj4Lh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "733d3f08-8553-44c2-804f-c170e3f71d90", "value": 38008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "0f5dfd7e-e749-4b3a-a838-3b50051780da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b18563-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "35c31e76-228f-465e-8ed6-9984f00bbf72", "comment": "Malware payload (Mirai)", "value": "76f7a54fe6f18405282a5ef0f3dc5b03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "3f01cba6-2cc1-48d7-af5f-d42d59ea46be", "comment": "Malware payload (Mirai)", "value": "9a65c9decfc67c9d447e1fce11db550800ef71505900ce38394b8506c2480ba9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "953065c3-68e2-40a3-a76b-266ec223906d", "value": "T1A403E18CADB868D2CFDD48B0511617A8B9A1B5D27347C74D9624CC6CEB1B57EE0C84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "8f09fd97-325f-43b1-bce0-166a32132115", "value": "768:pVyIwYjG0JFzFubGdtjUq8pi1zKxrxaZ71tK/WJ:pVyYjXJ5cbwKq82KxAM8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "80c1d03e-bfbb-465d-8ea9-d91fec24cf75", "value": 38096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "53eb9176-3d9e-4e36-9de2-6eb792b7c97b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b31ba8-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "f59d224b-2f7b-47bd-88a2-a3678f7c68e1", "comment": "Malware payload (Mirai)", "value": "00211464ba3ca0bcf7a8e1975fb5aa12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "0bbd1f43-3eb2-4d69-bd9b-a10e7619d714", "comment": "Malware payload (Mirai)", "value": "780c11a514b2be34c72edfc7fbeac0404157e6f64809576dca680ec89f21d252", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "f91cb477-8693-4e8f-874a-fe9bdf3e9c70", "value": "T1FE03D145B8A0B056C65F1C3F638901AE19A4F2D575493B7BA328CC89AF37C1F958DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "75eca5c4-ce84-4bd7-97e0-a7c6b4ee8d72", "value": "768:tF4o5gt3IEG6Ks1mqDUKf+8hr89kxcEDV/SLXQlov0zBZLvad4mwu0WGNXufW8:zl5JnsrXvrKy9QjyBZLvDmR0AV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "1c0e5263-cb49-4da8-93d3-97d44511de7a", "value": 38640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "cf6cf639-dc8d-46d3-bfc1-dd6c87c49806", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b785fd-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "702ed189-db5a-4709-8bd5-979a7877e8ec", "comment": "Malware payload (Mirai)", "value": "ecc9653ec6db6fd135589892b9eb6694", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "08a90fc9-e5b1-42d5-abc2-b315e520e3a0", "comment": "Malware payload (Mirai)", "value": "b3a7617e995aa20f9801b0cda343f7e00d8600df97f9302f5b1ae23c7a8292ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "95ed8ce7-a02c-4ff4-a3ed-35e09fb93ed1", "value": "T1C5F2E134C1994FE2EE9E8FB026D153DA7FEC1B4B17228CB37142CF919701406999EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "ea99cc84-53db-45e3-af2f-0ee349097a7f", "value": "768:teDRJ7WcwHDB40LYBm1A/PWyi7yWr/iu2NJ/STE4uVcqgw099:tCRocD0Lu/PWUWr/iuMJB4u+qgw099", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "f3816663-0024-40ae-b98e-b3ef34b9ebf8", "value": 35140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "7efa8505-4005-4ad9-b543-a2379b29da13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90c25e87-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "05dbb01b-0876-4821-b858-5f5c7da2d1a6", "comment": "Malware payload (Mirai)", "value": "0b0765d8ccb0fb1b86bd03def878b179", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "010a8a34-cd26-47a4-8914-2bcba956f72e", "comment": "Malware payload (Mirai)", "value": "f1954784da42fcd176fd5af97040531e4ab108cea409ac07ec42d995d257aca9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "5f6b329b-3a0e-40de-a538-d69e620e6284", "value": "T1B4639E16D82509A9C286C5B471EC8E3A1B13E5C063837EF71A7AC375A067D9CF849F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "ef93f515-cb77-404e-ae4a-eb821cebf088", "value": "1536:D/rMkOtfaR0glv2ZKsT5Z7BPxznCI0sCp8udH:DYkwfCFlugsz9xznsxrdH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "add8b6ad-9b0b-4480-98ae-b699a3e3018b", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "116d8aa7-6882-410d-8d24-31b0c5d16589", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90ca8721-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "00027bf6-ab85-4d56-bb98-c9090576d950", "comment": "Malware payload (Mirai)", "value": "b5d279719da3a0cc347c8ef3332a215d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "cac2f737-7e6f-4f0d-8ca9-fd01d3c47f6f", "comment": "Malware payload (Mirai)", "value": "a6ea2b86f9ebeea6407bcc166b6681f84c58eb781af90d7a1454494587a28798", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "52b224ca-8ca0-4d4d-aca8-60b43355ee64", "value": "T1FB734B21F9391927C0D5A17A21F74B23B5F643CE20A8861F3E710F9DBF615403A57A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "19891dea-241e-4c06-988a-d5f3a55d4f27", "value": "1536:0km4j59k6XTXypv4u4YF7tR7SYm5BHxS1H1tTOfT:7PQbrL7SYOBR2OfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576495, "uuid": "50a95796-b1f7-4363-ad40-a31e1ee70579", "value": 80032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576495, "uuid": "210cda04-1d1a-4aa3-bc64-1655e13acc6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95cd3446-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "0dc0c8c6-dfd2-433f-b826-b5588608fb8a", "comment": "Malware payload (Mirai)", "value": "33ced1eb404a931b09f50e47e9a4f64a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "5ba3d999-4d64-426a-8b83-cd6c95233206", "comment": "Malware payload (Mirai)", "value": "2a64626a521e1cae3c256e567a3f5d42989cf4d6f4ed0222b0a52e3972f0eba8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "40713e5e-183d-44bd-b712-ec0e4b69ff21", "value": "T1D6030217E066A8C5D9A480F6E5A781413B525FE4F4FA72933350CAF49C3A8DB78B8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "4ef906b7-0214-4252-95c6-e937484e706e", "value": "768:fWVVasPGxpBnekBYlk8i0fPkD+bk4nwx/RWUiQ5mIi9q3UELyS:fWXasPGxplekBgTP654QwGkILB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576503, "uuid": "83f19df3-7597-495f-8e6a-d101cf57b1f7", "value": 40348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "475f1671-a089-4466-9439-72d8c7d53d70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95d18508-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "a2df1424-dacf-4ba5-8a61-fbdda8b4599b", "comment": "Malware payload (Mirai)", "value": "474aa8e11ac96938ae5b3eef9739921f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "0c8c3637-3bfb-418a-8229-a8021cc3805e", "comment": "Malware payload (Mirai)", "value": "bf94d86b78fe5c95a302f6b3a640a04c46610dc9f47ffd812cd21f5a8eaf10bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "b92a3296-6760-4860-8ddc-b50d9c0ad2d1", "value": "T1E5F2F1F08262861CE77C52BE44ED1A4D2C4848199D04D0B6EF847D331A16FA9FDB5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "8a89dd16-1005-45e5-83c8-5de7377046b0", "value": "768:BW/zEpEYEgHE+Tc70R1cVC9owNnTAz9okfHey1cZ+2nbcuyD7UHQRjZ:E4B1E+TcAYC9owuiOTO+2nouy8HyN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576503, "uuid": "a3cf7af3-d671-44d5-bf32-01cf197d661d", "value": 35948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "21cbd0ee-2afd-466a-b0d1-effd08f5d2fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95d664f9-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "b8c6ca21-0682-43fb-8b73-c8601ae92623", "comment": "Malware payload (Mirai)", "value": "291b80daf6017369c04d5fca9f7e7496", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "28f43109-7dd9-45a8-b783-7e9a6a9a6026", "comment": "Malware payload (Mirai)", "value": "712bb921a8f89af45102d9b9050453d3fab8828b67eb872fe6a6408897808ede", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "60636a54-a290-4f0c-8cf7-2ee184234ad0", "value": "T1FBF2E15315B94108C16E21790C6BF98E48A08AA9D6BDC9F24F58F433C953FDC3A587", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "b72d6452-ca62-49ae-8718-ee2f3cb05a61", "value": "768:WCkGi0D/4BfI7dZnRh7/IN0BIesyoXKot5V4oEAIp0WhnbcuyD7UHQRju:WBGbyqhXrTBrQX4oEDhnouy8Hy6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576503, "uuid": "6745e7d8-7c86-4efc-9fa3-b7a869f189de", "value": 34912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576503, "uuid": "d4e503b8-1286-43dd-8aba-00455cbe909b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9651fa4a-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576504, "uuid": "3130bbc5-de1a-4582-82cd-eb9ca49a5aaf", "comment": "Malware payload (Mirai)", "value": "03c3ef98db084fdd8f3613b4c8458c77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576504, "uuid": "7e9f6b4d-aa35-4dc6-b81a-3e7910b4abc2", "comment": "Malware payload (Mirai)", "value": "8fbd36c057b55914e35670526a01b50a9fa219158d1f2a24b5d1f51abb4fa6c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576504, "uuid": "79d50114-4609-4910-92e8-727346a9b8ef", "value": "T16B92D0304526BCB2C7617432973F8902CE5A03FEC6F6317A236465A4DAD558F2EA46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576504, "uuid": "d0c89a52-eacd-40d2-b2f9-25e1a07af01f", "value": "384:k93CFDMsFGg7EMUTmli2KvZw93KmQxPitrsnIns0t2dfNH8uTzPahymdGUop5hts:QCyEPgoKRwZGx04nIns0t2nys3UozLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576504, "uuid": "72862f9a-9fc3-4550-a28c-83f7c3bbf894", "value": 20540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576504, "uuid": "126d83e9-8862-4786-b6cb-17e68aec995b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "998aea35-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576510, "uuid": "7a928c26-aa76-4fe9-9a1b-96d37bc0ef67", "comment": "Malware payload (Mirai)", "value": "5a766f57fed16449aa6973cc0d7327ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576510, "uuid": "68ac03a0-fa13-46c3-8669-9175759d8650", "comment": "Malware payload (Mirai)", "value": "65b9ac19a73bac53ce9393720ba22a141006208a9ce0b33655e6fe5c96b43bf6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576510, "uuid": "5d116a18-c8f0-4e47-a39a-dbe10c19a27b", "value": "T1495312269403A8B5DB637D73BAE04FC3FA0A4B73B5985039215531A8F6F85612CB22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576510, "uuid": "5e486078-11e5-4f88-bc15-4535c5b143d7", "value": "1536:Y7XduYshWhq/HIEy6Og3Nwz9hAyTILSM5Tfv83KJGTb6R4b:qdpssMPR9w4y8LXTX83K0Tb6Rc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576510, "uuid": "36a82249-9ee7-4662-a66e-571bb4f2f2b7", "value": 61840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576510, "uuid": "b4e4d255-1ca3-4af3-81a1-8f23228208ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbd1366b-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576567, "uuid": "9f4b3867-6bb5-45ef-bf4f-cbc7384d780f", "comment": "Malware payload (Mirai)", "value": "f939bd0f2b4616a813271ad64f3597cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576567, "uuid": "931a4e59-5177-4e49-af89-26cb476e85a3", "comment": "Malware payload (Mirai)", "value": "78dd7f789bd2943eca0f4453a88e31440b61de6248b2043bbd2a860929b8868c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576567, "uuid": "9b81b46a-afa5-495e-8d1d-0e2e4c671732", "value": "T11B83199AF800DDBDF80FDAB74463490EB931E3910A931A377767BD53AC721A14826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576567, "uuid": "ffd51fd7-aceb-4768-a8e6-ac30e3b9c5f8", "value": "1536:4v7sC9KZbx5uW8eLoPSdAYA9lJPc89s8br0hpsBq1HHbqFiQpsrH7I0n:4G5hLsd9lJP4npeqp+psrbI0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576567, "uuid": "4688d387-5fb8-456c-b9d1-331c49c7dc0c", "value": 84960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576567, "uuid": "2b1f2c64-bd8e-4f74-ac88-ba5f36572c19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbdb2a4a-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576567, "uuid": "1eae8d88-3307-46b9-8231-78c5ae7287af", "comment": "Malware payload (Mirai)", "value": "c5089ed1315554ad69f3ae4aeb70a3f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576567, "uuid": "c581a568-bbbf-4693-a112-dbff3fc17542", "comment": "Malware payload (Mirai)", "value": "3dccc7f4365b5de6157be8add07b0b1e8a96f9976f66cf68b82242f0dee135a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576567, "uuid": "cfc061f8-493e-4f5e-9118-88239b91a518", "value": "T155B3AEEBF64715A2C85243F013C79F8E3E232290AE57E4E76D1E167B19760DB1D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576567, "uuid": "e2266806-9dfb-45f4-8c2b-6dd264daa975", "value": "1536:pcdlYSuiBMW3zC8aRGGTtJM/qrlpmxJ6nDgDG/LWW:8YSZ3e8ZE3MYlphDgDGq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576567, "uuid": "969c8c79-a3eb-4744-b199-f8d2abe6b18a", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576567, "uuid": "c43eedc2-4434-4f77-b626-dbab157c179f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd2791f9-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576569, "uuid": "33e959e5-c117-4f92-8b7e-80d473d828b6", "comment": "Malware payload (Mirai)", "value": "01713698d7810e31331bee458b24e333", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576569, "uuid": "a66856a1-080c-4ce0-8412-742893bb1081", "comment": "Malware payload (Mirai)", "value": "2c8b5697eae5d4a643b74c4ae2c554c9d16f5243aa47e8638108718a4be93a6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576569, "uuid": "f41ee768-6aa3-4519-80a5-6e119cbb163c", "value": "T1F9F2E169218DA476C2F49CB3D97046F11D3B00B6D4E933A15FF98288E145612A87BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576569, "uuid": "cae1ee10-89b4-494f-a2f9-0849fdbf311d", "value": "768:prFs5me135wp1C+s9vbM5YNMygu+OR1juP3ACqtqNLIzLtZ6GqvMRsFeWs3Uozj:p/eRSnQjMgVuP7qtqxgtACRs47zj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576569, "uuid": "a3038353-f89c-4901-aa73-1b20951abb43", "value": 36840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576569, "uuid": "00f88cca-f37e-4b78-88eb-9cb4fd25fc60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ca40f00-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776576630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576630, "uuid": "6414e620-124a-4b09-8b2b-1f55d0608abf", "comment": "Malware payload (Mirai)", "value": "eeb76e6e1ab969d3b78faac6861f95a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576630, "uuid": "41249a2e-93b5-49d5-9787-ceadcec4c5b5", "comment": "Malware payload (Mirai)", "value": "f526e1d1b7a9b831a8db797c8129f86c89df434d19baf1888f03545ae1bc7930", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576630, "uuid": "638a3bba-3a2b-4864-ad74-c82c830a075d", "value": "T112E2F26A51ECB12CE45E903BC32FA98E31E65D11BE17C69424C476DADF611F910B68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576630, "uuid": "8ffeea3e-1dc5-4d18-945d-0ef77134ae1e", "value": "768:g32bRAqg2vQzSPMjFY8AFOEPB6ZSq7xnwNQBUV:DbRAp2v4ECF+FvB6ZSonwN2O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776576630, "uuid": "2364f166-b859-45d4-ac9c-38cb1b532fc7", "value": 33900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576630, "uuid": "efd26f0e-9eb8-4836-a56c-ec0dcbdb5daa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940764d2-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776577359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577359, "uuid": "89a48cb2-3444-489f-a8b5-ee3c7f151db6", "comment": "Malware payload", "value": "f011ff60fe4ca2db0ac300217af64890", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577359, "uuid": "1978bce1-4fa6-4c5b-bf09-3b698a5ee325", "comment": "Malware payload", "value": "357fd809af6c73ef7db7106f27abf8cfd8f73ce60ad27b9306a139e8d740d1e4", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577359, "uuid": "bdbd0c40-5673-4686-8d73-44ad8dfe69e0", "value": "T1EFE42343084E7E656F2276367536781823BACC1809CEFD7EF271676B5F0A08D8F492", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577359, "uuid": "a8a3dd7a-14ee-468f-944c-e1be1ae3cb73", "value": "12288:xz+Yrm+hFrCZsKEDLkje1YtPXQPbSyvZ7SpIqHO/sU+zpkzAFBk7VLHooBlB:Z+WlFRvDLk5PXQPWAGIV/n+zp1F6rLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776577359, "uuid": "b3f988b4-ab4a-4266-94c1-f6d7b003e1d9", "value": 698984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577359, "uuid": "63ecbca0-5397-40a6-af86-cf9f10efd222", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47ac4676-3bb4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776578090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578090, "uuid": "74e70d3d-ec1b-4296-a9b4-c0f5030b5ae7", "comment": "Malware payload", "value": "9b87f3a9cbaa6ad93b489b02af87184a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578090, "uuid": "88abf7f7-39ab-48a4-8e6c-3156c58dbaff", "comment": "Malware payload", "value": "afdac0e26e178e4d52fd9fd664a2d5ab9b909e1ec3f3ce30c25e4fcd21503389", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578090, "uuid": "edfbae39-9aa8-42d5-be13-204dcf300935", "value": "T1888309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578090, "uuid": "a317a7cc-8b16-4198-a3f3-2a071cb5876b", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnlWa/VN/:XEKltp9txAX/yr2pblWuVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776578090, "uuid": "3cbd91c7-4852-4013-9136-144caaf3ad2d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578090, "uuid": "87e9abd2-e342-4bc5-ade5-c45f16fd24d3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2e11fa3-3bb4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776578243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578243, "uuid": "54e49acb-dd81-4a96-af13-ab4b07297b66", "comment": "Malware payload (Mirai)", "value": "b741c5240b006c88a2dad046106e0aa2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578243, "uuid": "a48d8fe2-2879-4e17-8881-86e921ba0d5f", "comment": "Malware payload (Mirai)", "value": "39bb6fe8eae962ae2c24a9ee3d2bd35447c8b8ba3aadbe24b3c1cc337460d7a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578243, "uuid": "7cdcfec3-68ea-4ac4-b5ec-59be6cc98df4", "value": "T139140F21B4CCD9C7C426627CA1EDAF7ACD3EF2DA2705DD037ED465314AC9E9A290AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578243, "uuid": "5f51dea6-ebc5-46a4-9e83-7d7f69c669c1", "value": "3072:qSlz8oYUSPOfQqHGxl/TBL865sJg+2XrhnwTzedNA+IiKZ:Bz8P1OfV2/TK65sOuzA0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776578243, "uuid": "01da78b9-45bd-489c-8aef-b45414685fd6", "value": 198088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578243, "uuid": "c5745321-c2c4-49a3-93ae-dd856ea0fc1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c4fba4e-3a52-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776582011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582011, "uuid": "ec014f13-0b92-4d4e-b495-e33dc0126d48", "comment": "Malware payload (Mirai)", "value": "4bbe607b2ba4ebe1f41e63adfc4a6a7e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582011, "uuid": "701aeeb8-300f-44df-9c0b-d012be3a8419", "comment": "Malware payload (Mirai)", "value": "add97f691f8bd8af5efe0480a90f12bcdcfa089f7432088b4ff8bd0606ff58de", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582011, "uuid": "984c915e-8a06-4e07-a96e-69e4ff27828d", "value": "T11864D08AEE00AF25E9C026BAFA5F034973774B6CE3DBB111E610D72936CA55B4F360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582011, "uuid": "03ce297e-99b5-4f5f-8d43-382c45856e51", "value": "6144:p3lOYoaja8xzx/0wsxzSi5SDP99zBa77oNsKqqfPqOJ:p1CG/jsxzX5SDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776582011, "uuid": "e7a54ef2-3a5f-4622-b411-30735ec2e42f", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582011, "uuid": "e3e53104-a380-4177-90c7-4fda9ec7c843", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbcf7da1-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776590741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590741, "uuid": "35dd6d0e-0cf6-4219-b61c-7989cb7a1e34", "comment": "Malware payload (Mirai)", "value": "8032814a64a99e29f2d08266c53b1d8e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590741, "uuid": "54860d18-9376-4f38-8c64-ecddf29d4471", "comment": "Malware payload (Mirai)", "value": "dea28db367115ac060b007e354b0ff8cd554af70f5995100e00be4aea3a5226a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590741, "uuid": "f031eb64-28e3-4c74-b93c-775a3f9ac4b1", "value": "T1C251E7C546846C792CB7EA53F6B6C12C3091A4D318EE7F99DDC8BAE0868EE14F1407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590741, "uuid": "d3db8a57-4982-4f36-9402-f25d9e20d785", "value": "48:vpd70d7N7hpdvd6GpdgndzPpdfdKWpd1doUpd71d7o7UpdfOd3bpdEd9RpdhdcgD:vz7+7N7hzV6GzgdzPzFKWznoUz7n7o7C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776590741, "uuid": "c23e1b28-9e23-48ad-ae30-c561a122918b", "value": 2940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590741, "uuid": "a63c2d3b-3c0a-49df-8f8f-3505b859c1dd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25d29b2a-3bd2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776590918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590918, "uuid": "cc32d780-6429-4e74-a375-10d296b67f72", "comment": "Malware payload (Mirai)", "value": "ecfff116ddd6f7e93ec2de7cf446bf2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590918, "uuid": "c925e9cc-781b-4a7a-b5f5-69c88873cd7d", "comment": "Malware payload (Mirai)", "value": "b7f55465f7f5400953d0f07a051f614d12740f0efc5c3b14d3a4369620a96db4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590918, "uuid": "80cdf9b6-b020-4e1f-afe3-7c9791a3da71", "value": "T1F3334C51B9919B02CAC25177FB1F4389771B139CE2EA7303DD29AF21778B86A0E3E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590918, "uuid": "6a7c998c-90e9-4078-bda3-232ca521fa1e", "value": "768:PAv/qJl/GsMxhHQfMgulefg0wGdVIO7D91hCuAuUvDKMwDiWmVHXvDgxo2I:cqJcvHQfp0eFVIO7DPxo/weWmRXv12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776590918, "uuid": "d90b46b1-d1ac-4cbc-b500-39a5b95aea6b", "value": 54672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590918, "uuid": "685dd800-a34a-43df-bb8b-79642e23c4b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a4c6c7a-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776594738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594738, "uuid": "ea94c0a7-0477-43f9-9c91-a35a557cc2b6", "comment": "Malware payload (Mirai)", "value": "6250630e092b61b50c00744aec4950dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594738, "uuid": "5b3ed399-1aca-4376-8908-846fdfada94b", "comment": "Malware payload (Mirai)", "value": "1a878d78a64deab4c96f22f28f3dd7424d337916dc540df86d71d3bd7fc3fcf3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594738, "uuid": "4497772b-7724-466c-92ca-e834cfceae87", "value": "T13AB39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594738, "uuid": "12ec1d6c-28d4-4b05-ac1b-9b0aee0003c5", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg11/LWy:c9sSyzz36YaWWgg11q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776594738, "uuid": "6bbde8d3-8ccf-4bdc-8520-cc9ee5ab094f", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594738, "uuid": "c1d251b7-b5a0-44bf-9a41-84a6a9a738cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b69d9efb-3bd5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776594849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594849, "uuid": "294e72c2-7521-45a8-ae29-169a0b1eff37", "comment": "Malware payload", "value": "1aef6a4530b0519328e6ea1d4b9f00ac", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594849, "uuid": "770d62f8-474a-4ca8-b82d-d056fca4495a", "comment": "Malware payload", "value": "ac2e4647b0e0847df5f61090f3fef65f20caa7534f0cf41f8d307d3545dfc60f", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594849, "uuid": "1902eb64-af05-4070-af82-4d563a57d8a9", "value": "T160168E17BCBD5869C099B1348473E606F964B8445B2727C71BB0F6282F3B7F05AB9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594849, "uuid": "7662794f-abf8-46e8-b0ed-28edb9ec2848", "value": "e1221a662fa83b5d7fc5aa5a30acae91", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594849, "uuid": "b1af5611-15bf-4ef7-9732-cc5123d8a712", "value": "49152:GnQimYWnbD9BWQaRykA161yLf/YPHrIJWSM764mZfWjoQcT/RqiH:GnoD9sQ6b87M7MZgSRqiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776594849, "uuid": "cafbff07-e03b-45dc-ab1e-72ecdb55d358", "value": 4393488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594849, "uuid": "ec63bd43-8b09-42a9-ab89-67e83f98e31c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53b9d35b-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776594861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594861, "uuid": "74821288-ced8-476f-b4bf-83a5ba5dabb3", "comment": "Malware payload (Mirai)", "value": "36a39924126311815e668da61a183d2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594861, "uuid": "95702516-3259-406f-90e3-0a83dbad0871", "comment": "Malware payload (Mirai)", "value": "1331641da9e8f87325cd3ae440ed38b97472879a5f3ea5c2ec697639d248551a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594861, "uuid": "c14e05a3-5c61-49a2-8006-4694c4238ee8", "value": "T188531AA7F800E9BDFC19E7378457050AB131F6A606520B337367B82BED761A5046BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594861, "uuid": "8a14a2b7-69ae-41d7-955b-001cddfd4007", "value": "1536:51dcM+bE7Vp833Py6+caFpEKsEJ8rX+1VOB6nrhNHJFL:5EM+6gy6+BFRJ8b+1VO6HL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776594861, "uuid": "863254f1-b639-4fa2-8dfc-b9df22f8137e", "value": 61548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594861, "uuid": "ad51b264-819e-4a74-a92f-a89df89f3af5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1b4a426-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776594992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594992, "uuid": "b5b1def5-1beb-4132-ac7c-2a68cb2afbc0", "comment": "Malware payload (Mirai)", "value": "7805caaf65bcb21b637274e2cf4b1c9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594992, "uuid": "e63533eb-7342-4562-abec-8027b4c9aee6", "comment": "Malware payload (Mirai)", "value": "6411d990948b96e8347a053611e6d4d178f995e913d973404ea7fd8d07b442d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594992, "uuid": "29ab3e3d-a610-4627-b958-5ae91117f303", "value": "T173B2DF3C1B121B98DA1EC0BD839D0B613DB41B2591829D4B6207BDD7AF968B47493B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594992, "uuid": "84b38cb9-4aa6-4ea6-9f06-0ee49667598e", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiymdtJgGlzDpH7uNj1JA4z:YeD8ZSWvZHZbs1row697qohQvg9yitJg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776594992, "uuid": "13a99f0e-b655-450c-8286-93e42b5febfb", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594992, "uuid": "9c7a8a48-dda3-487b-984e-726b269fd1f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e78d06fa-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776595109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595109, "uuid": "8a7a002f-2ff3-4150-8fae-b7f04d487c8f", "comment": "Malware payload (Mirai)", "value": "91a3f0257c0d2f23cccf519be740a5f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595109, "uuid": "e1f02d81-f299-44aa-a2c4-3d19d7fa1afe", "comment": "Malware payload (Mirai)", "value": "1732bed0f562480c7a711308e6561e72b17ed78d0d9b631c08ca161df838d47f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595109, "uuid": "8a09231b-3db2-4679-ba45-c036dd6bac9a", "value": "T1A8D32A56E7408B03C4D22779BADB42553323AB54E7E723069928BFF43F837AA4E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595109, "uuid": "18d6070c-8a73-469c-b91d-b84d1a4e8826", "value": "3072:BofZvBgAMSJHcCDa/La7nb+yx/j0InM/9czn/sQJB:Bo1eAMSJHcz/LaWY/j0IM/9czn/nz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776595109, "uuid": "0864feac-e261-4eee-8ed5-37cf83586738", "value": 136062, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595109, "uuid": "d7264913-0ec6-4de3-a513-440d98938a85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cf48661-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776595360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595360, "uuid": "fbb6505d-5a61-4263-95bb-b12e18a43701", "comment": "Malware payload (Mirai)", "value": "04672a34d64b98489524d54a03cc6366", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595360, "uuid": "2b53ce40-f0f9-4f93-80a9-ff97fe57bf39", "comment": "Malware payload (Mirai)", "value": "8e33ed298c7f597dfee90e22ff874d2cb1ea978013763e0e0e04a08845aaaa03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595360, "uuid": "c72db1ae-6217-4259-86e6-d9f9f004552c", "value": "T138B20981B4E29F4AC6D12676BB5F57997303B7C8D2DBBB13D4085710BA6B21C8E2DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595360, "uuid": "434cd7b8-636d-4ac1-831b-8c111521dec8", "value": "384:5vfsB9gh/flURZhpx5BJRZhpx5BJRZuW+mO2eGuW+mO2eGuW+m3+2eGuW+mO2eGq:FfWo/fKRZhpx5BJRZhpx5BJRZuW+mO2c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776595360, "uuid": "6f8a122a-3615-46bc-93bf-2ea85c0eadab", "value": 23824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595360, "uuid": "b18fed8e-1b88-4a13-b663-88957c1d1819", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd0e76b9-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776595494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595494, "uuid": "d3acfd51-2e34-4d25-9583-ebd8a5134a33", "comment": "Malware payload", "value": "c65ec09fd337541583064a93741db6a7", "object_relation": "md5", "Tag": [ { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "json", "colour": "#84a2e5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595494, "uuid": "cb8e7898-2573-4da8-ac47-85707c6f805a", "comment": "Malware payload", "value": "ddaf3e619049a2b90e332d2b1a5afc02241ad602cf3a5bd6f14cafbc2b5e989c", "object_relation": "sha256", "Tag": [ { "name": "config", "colour": "#10580c", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "json", "colour": "#84a2e5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595494, "uuid": "bd31b9f8-b724-49a8-a0c8-ac227eba7c12", "value": "T12721ED21CA200CFE05B8919C8674A393DA188B1323641C3F71FE9A1C2F776326562F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595494, "uuid": "08a78681-5e4a-4059-8cec-96f353130b4d", "value": "24:n5m2FNNFTWreoAo1QYehw6WdYtPPI2AtP6YqFqtP8+t1PG5saeFVwv713WjH:42FzFT9o1QYYtPPCtPPptP/BFVwU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776595494, "uuid": "9fa0feee-fec3-4dbd-993d-782c2099dd58", "value": 1424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595494, "uuid": "0faff3ae-8286-4310-85b8-f543cb5e56d7", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae274865-3bdd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776595872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595872, "uuid": "330ebe6f-29a5-4edd-ad16-1056dc412aca", "comment": "Malware payload (Mirai)", "value": "eab352465d6dd40b666e9ebb755b5b5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595872, "uuid": "ca8a6098-9a2a-4ca3-be7f-2524f0c3e2f4", "comment": "Malware payload (Mirai)", "value": "e25c1ccabf58844e0831ec38eb2be90f1c85b12bab55a356d95da96c333f4e82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595872, "uuid": "203d44a3-ccfc-4207-af1d-d2e881d9ec24", "value": "T191435C26BE610C1BC8C4657A75E34731F6F6434A20BC4E1A7D614E8CBF68E8072577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595872, "uuid": "7b80e61a-d21e-4633-8eac-6e568d019d38", "value": "768:lza0kPtMRWEGZ6C2trYa3lO+o+IPKVhRnA/5N/7ugz1tUAxo3IE:ZCMRWEG4fYa3lo+3FnI51tRto3r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776595872, "uuid": "5f53307f-7809-467d-b8b9-987d8342de2a", "value": 59316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595872, "uuid": "be973a5a-439a-4125-98fd-0150534fbeb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "875107c9-3bde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776596236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596236, "uuid": "7ed990d0-3772-4cef-be02-6305a2e787a8", "comment": "Malware payload (Mirai)", "value": "a2e28b26861d7b0830e2f23c93bd8847", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596236, "uuid": "95c350d3-402a-43a0-8284-0fcf03435ea8", "comment": "Malware payload (Mirai)", "value": "666a72be748db10a1e1498dd0fa51c7a4db618ec7ecd332997f80bf82c776caf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596236, "uuid": "4ca5c204-321f-402a-beab-c7cfd41ea0cc", "value": "T115336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596236, "uuid": "0f8a5461-29b5-4d3a-a82a-2b0c248d01a1", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776596236, "uuid": "7ad0db0a-4127-4936-b07e-9c1a29e44a4d", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596236, "uuid": "2a1aa4fe-6bc5-4a09-8eaa-1ab8c81b6632", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9752f439-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776596692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596692, "uuid": "e69d0fdd-1364-4555-8a69-793bb89bb792", "comment": "Malware payload", "value": "43501e802b35a58c65b00bffcfc2efc4", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596692, "uuid": "b270469b-779e-4e67-b563-19fa5f107df3", "comment": "Malware payload", "value": "a43477acaedd5ec418bbd28f823db2eed67434c64cc558b88e8f7fe80c2c09e8", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596692, "uuid": "b39d7a07-ce7f-4c6e-8267-15f5154f6e2c", "value": "T19D673396EC20EF6BE53F94305B3D134282A5AE5ADE93D53B32767356A5F73A032380", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596692, "uuid": "a445da67-8ab9-4115-a69e-ce9fbab0bf90", "value": "786432:QQcu98R1Z7SCjEbp+9MJK0uudj18Syj3D3a4WgvhEV:QQSxSCjJ9zpudj14DdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776596692, "uuid": "e5254e68-50eb-4eeb-8eaa-7b6b15804ad1", "value": 29941760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596692, "uuid": "887062b4-bd75-4db4-a367-d8341de48e53", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6f9842f-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776596719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596719, "uuid": "41eb4df8-ca10-49e0-9755-708ebedadbc3", "comment": "Malware payload", "value": "43e2e0daaf76ddbde17164a963a75d6a", "object_relation": "md5", "Tag": [ { "name": " Dropper", "colour": "#a2e619", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596719, "uuid": "16da01db-6424-4f50-afb5-8e6525677cb6", "comment": "Malware payload", "value": "ba03618708f38ac7e661fdb2300a1e72a200a7425cc763df39babf607c989f8e", "object_relation": "sha256", "Tag": [ { "name": " Dropper", "colour": "#a2e619", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596719, "uuid": "c1d9c130-b4d7-4086-b55b-d644df86bca3", "value": "T11F5423173C72A7CE5E6279CB963845503E49B44B4B4523CCC96EAAB27DB1083FCA5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596719, "uuid": "5c995727-e69d-4326-af44-a4c5d027c738", "value": "6144:e4xoNEDc0GJFCDnfrFWjqfb36/9YFEDH4W/L+xvKWw6RHl99Hd:e4xTDc0GfinRfb3kC1Nz99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776596719, "uuid": "ee2ab025-630d-48e3-9374-10384b6120d9", "value": 291983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596719, "uuid": "25af233f-e16a-47d0-84f6-0ef0028fdc89", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a725a127-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776596719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596719, "uuid": "433f01c2-4187-45a7-8619-1ee33b1c6007", "comment": "Malware payload", "value": "230437583fd91bdc166dc706fe830c2d", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596719, "uuid": "74e1040b-9b2e-40a4-a9ad-62a71fa04606", "comment": "Malware payload", "value": "869fc93a733ba9d9abc1d6b666e76f92f164ec063f120715e9de408da0dc3cdd", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596719, "uuid": "83aa1412-49ab-454a-969d-abcad172b654", "value": "T14F562903FC5545ADC1BEE134C9A58273BA613C885B2063C33B60B7B91A7A7D45B7A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596719, "uuid": "51f56202-2770-4741-a686-5ad083fded53", "value": "49152:pPqH0hk84r4mf3arb/TFvO90d7HjmAFd4A64nsfJyBMbxbi0JQUwEskenUGKORxM:pPq4zUwiMxcx9fEL46", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776596719, "uuid": "5db45e5c-d25f-4a09-b06e-d0b2e56f7e89", "value": 6070256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596719, "uuid": "b593fd17-d0a3-499c-84b6-4516364422ee", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4be7b42-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776596768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596768, "uuid": "a1d92064-88b5-4f7d-b32a-824373ff6b94", "comment": "Malware payload", "value": "9a4489bf4473e8d78d1814ffe0a3781a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596768, "uuid": "a1569d03-d92c-454e-8013-85636bcb0eec", "comment": "Malware payload", "value": "ce76ff2438839671183d5fcfad6e6eb60fe915e44779fa94c0f1d7b5f3f6ba95", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596768, "uuid": "f2be95f8-c1e5-4c09-a77c-e3ca02b3197c", "value": "T18282D1C681B1AF0E112D8DB3163BDD90C1E1A71B2793D107D63F9356D6A2E39F8880", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596768, "uuid": "6922283d-5e48-43ab-bd81-e68db824b3ad", "value": "384:IEzqJhyJm0YBGYUkNXTnncYrzTd/HZlBp+jkY+2VmwVm1SVb1j:5zqTyNYXvbTrXnlBnym4Qal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776596768, "uuid": "e70a5370-e043-4adf-a35f-3103495c55f4", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596768, "uuid": "c3164773-fd77-49ff-8e4b-7b39886a8923", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8d3d994-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776596856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596856, "uuid": "82f3184f-08fd-44b2-a929-a5cea223da6b", "comment": "Malware payload", "value": "971b058eca1f783c95f34a9357ca7ebb", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596856, "uuid": "32a6afc6-8405-4ced-8918-09f3765e4628", "comment": "Malware payload", "value": "7c37156559a5ef26dd248e8804153cf0eca8ba89cc542617e6dc461bbca49aa7", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596856, "uuid": "c7d363d8-cbf6-48d9-9588-64a78f49fc64", "value": "T10E860127BE87C9ADDD6B44B351C28153692B13D9A88BD02F07E04E895F71D8A0352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596856, "uuid": "a5bda3ae-a9dd-4c67-8148-e4f2ecd6f50a", "value": "98304:simhLmAQ5tRu1G25tLXGbCdOpCo35wg+95btTAQl9xclzxdtU9dVAC1GLS1haJZJ:sLhLP2fkDtD4EE5V+PFZem1Gu2ZAD2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776596856, "uuid": "dc4fa949-4d28-4482-8734-c8d720a31156", "value": 8082105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596856, "uuid": "872acd32-8179-44f2-a0ef-38f3447aa846", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb60b5ed-3be0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776597263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597263, "uuid": "bc13e380-c3dc-45ff-84c2-bb71138d4e8d", "comment": "Malware payload", "value": "05e1084cbe5309324403714830a69e3e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597263, "uuid": "ad72f23f-310f-43d5-ac7d-d01c06d06f57", "comment": "Malware payload", "value": "5bcb2305fb933dd3a2e1d4e01cb492044330bf46740137b121f0642e8307427e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597263, "uuid": "666ad189-9a38-4a91-bf49-f61ac10beeac", "value": "T18382D083D564569D8EB9372CACB8ED6A77B60C32C1991C83C35214D7F5BDC128E851", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597263, "uuid": "b19aa087-3475-47c7-aec5-8ff421095bf6", "value": "384:uvbhC3LBDRJWkw+iYQZW2MX9gW4deq7pnmjWy5ftCQVpPYKDYM:uH9YQ07O95UCy5scDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776597263, "uuid": "580d2814-8840-464f-be80-1096ef8fc322", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597263, "uuid": "941b989e-e733-44e5-a1f4-544ac1711ced", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efe3a30e-3be0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776597270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597270, "uuid": "1a2d7c5e-b20d-4ef0-9b8c-3f9f7307f102", "comment": "Malware payload", "value": "dde1a70ab3c8fe4aa2636a5d71ef8275", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597270, "uuid": "7dfa0e1f-b461-44db-b2c8-a98285c0a46b", "comment": "Malware payload", "value": "a56b589c5f01a5ac9b45e9274e7dfde5c585fed5134656c3244a940e11225c9c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597270, "uuid": "46e81307-298b-4b2c-ac3d-2e2859811f08", "value": "T11982E0BEFCE8E6C01074217A357933A81F1D45B136A19EC0C6AAF1EF028D83DE14BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597270, "uuid": "65394f60-8bdb-419e-b60e-a8d6e4ed78b6", "value": "384:1vDS9I1ITWJoYd/X3uZG/yJcp2vt5wkZhRq5PfuvqO8:N1GmOZkQDv3wksFuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776597270, "uuid": "842fd730-1970-4007-b8f1-7aa354a0f7eb", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597270, "uuid": "6e3e6735-e343-45ae-bfcf-19802c0a8dd9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e82a1bc2-3be1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776597687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597687, "uuid": "c6ed14c1-c03a-4e5d-98d2-3edf2f80108f", "comment": "Malware payload (Mirai)", "value": "797d175d449d055578f1277b0e0225e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597687, "uuid": "005119aa-3e07-4423-8b66-af085dae0e3b", "comment": "Malware payload (Mirai)", "value": "974402fd8dfdad5bd83fa223ff6536213ad7c03862ba567a9001ceeda575a937", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597687, "uuid": "74afbde4-47f4-45ce-96a4-215f39dea27a", "value": "T13A633917B9819F11D5C1127AFE5E224E731307BCE3EE72229E24AB2077879670E3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597687, "uuid": "239fd247-6cdb-4f54-931d-bce6aad8cdac", "value": "1536:34nLpj4qHylDFOxdI9itt8z0v2aFXqg3X5yYDR:gpQCt8z0v2aF6aXoK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776597687, "uuid": "0b0a8f16-abc6-4eda-b846-46eb1029942c", "value": 66948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597687, "uuid": "c59b119d-d6e6-434d-970e-ffccfc5097d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04599b9b-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776597734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597734, "uuid": "3d752bde-b4eb-4584-9146-726c583ab948", "comment": "Malware payload", "value": "d2449d9fa2943a27048b05ee43e97bb8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597734, "uuid": "2ecd561e-5059-4fff-aac3-18e308ba5961", "comment": "Malware payload", "value": "83a8d1a5eba2d746896967944f936c261be911d965aaa3dd1e315391b3ab2f5d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597734, "uuid": "33e2c4fc-9674-4688-aaee-0c11169554a3", "value": "T102530AB3B180A437B53F98D5A1658FDE30A49606DD034680FEBC9271DAC6EF37E206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597734, "uuid": "f5e5be74-d6b0-469c-8eff-231091f978a1", "value": "768:snSm+seP6mN2r5IIsD8Ix1Py4FgupJYZt3yY2jcNB/ymSXcqYC2quT6Gou+yu:D1iIId+7pOfihjcNB/ymSXcq8Rlu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776597734, "uuid": "3fa3875e-57ee-432c-a16c-055bfc75d744", "value": 64353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597734, "uuid": "7f8c0c0d-03f6-4f1f-b944-e28d0fb867bd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9ca0130-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598012, "uuid": "7d7bf6a3-0178-4f1f-a153-71d2e482d052", "comment": "Malware payload (Mirai)", "value": "84e64b30f3cdf348afa6509be0445537", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598012, "uuid": "0954c8c0-1e8b-4dce-8062-9b3cf7ac0784", "comment": "Malware payload (Mirai)", "value": "9a2be56efd02f3b2de58f4df53620790dd72798fe866fa96a5268eba85d6c0b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598012, "uuid": "f85001d5-7816-47f5-91a6-fd1cbcd21840", "value": "T1CE330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598012, "uuid": "fc5636de-f8a8-4047-a6d8-83d3cc6dc44b", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGS:r/hqaJMDg9eqK806MHdkfQX6HuCS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598012, "uuid": "721764ca-20cb-4d3b-8b18-eb2df91bb14c", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598012, "uuid": "aab6dbae-6709-4651-a491-0dd8b256122a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb5fa913-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "dc4b77b7-6a44-4993-b640-453034516d47", "comment": "Malware payload (Mirai)", "value": "139dacb074bc7e6af371192a5a7f2d2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "5b61f496-aecc-4b3a-bf6c-e8d92af5f5ad", "comment": "Malware payload (Mirai)", "value": "2f9c3c7eb49474da5c92db62d39c487a0e1320925bcbf0517fd73e8922aa1909", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "d6ee2f22-e47f-43c3-bd4b-87fb1c06992b", "value": "T128B2D0CD61543084CA8D7C7C178D4A664FACA1D0BAED9B25E350CDD8B3BDA8B385D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "62c6f1a3-a26c-45df-857c-9f17a871b0ee", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpxpZqSWvE:4QlS07FUXqIYSXQKquRqs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598149, "uuid": "3fe4d174-9839-44a9-bb5b-d4ef0c19807d", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "c196a043-9536-4ec2-aad7-8980568568fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb69d564-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "6d2876cd-e34b-4481-a03d-b80068aba119", "comment": "Malware payload (Mirai)", "value": "15467c025989df48416e86d852350f64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "1e5a9389-c4e8-4c41-9713-682bb8844c38", "comment": "Malware payload (Mirai)", "value": "1067416d88581304e7fe8f37da558798026d622d346bd8810b8118d275e90f7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "a1d88a80-a339-46f1-982f-352940afb467", "value": "T12A53860A7E21CFBCFBAC863547B74E309658339626E1C584E15CEA015E7070E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "f3e9399b-cc2d-46ac-a92d-0971db1a6e6d", "value": "1536:uRRNZTbDuTm/O25BVZdLNCSZqBaCK9xIqgQAez:+RNZHDOyzFNCbjK9xIq3Ag", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598149, "uuid": "86237135-8f9c-4595-af33-045c4fad69f0", "value": 64028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "bf355144-b38f-4c74-9c5b-162eeb69228f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb761e23-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "565b3455-81fd-4ce9-910b-bab2f84cffc3", "comment": "Malware payload (Mirai)", "value": "1af8e07a396a54560bff81adcfd646bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "16e86685-aaf1-4566-ba69-f437ba292f9f", "comment": "Malware payload (Mirai)", "value": "0675ca71db315237e815ef3f7f6aa02254b6ca8211f7743b85d80c968b5a52b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "1bf62706-ade0-47b4-ad89-a3de76aaee0f", "value": "T10F230271490E8EB114303C76DF95979376E01AB1C5677013D6290B3C6F75B131E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "63e54963-9b96-40b3-a0b5-b58e89a7143b", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3EQ9q3UELbUXfi6nVMQHI4vcGpvz:DECFd+A6YHAxEZLRQZz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598149, "uuid": "168cd669-2728-4949-9aa3-4de24901bab1", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "39a1d2b2-020d-434d-a0a7-07838535456c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb76e2bf-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "a216cfb9-f4e9-4d59-9001-dc72d4efaa06", "comment": "Malware payload (Mirai)", "value": "fcc73cb5fcf7044c2195a077321a3a6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "1c0cb9a2-9da8-415f-a110-2fc82d775c17", "comment": "Malware payload (Mirai)", "value": "fb59556ab382c6aaf5504392f81c51b6bfd6903985633a3593d6def7b6abea0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "0839912b-f4d0-4f8c-a715-d26bfe705205", "value": "T185639409BF654FB7EC6FCC3749A91746258C641A21A93B397E34D828F24B24F09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "d2945690-4a98-4dc3-b159-d8acfac59b77", "value": "768:K+xGiJEEYlDIR99LYkLUAJtw6OC5f2eaeyWecfkoN3pkavdE5tXirnM+ufp:K+xGiJxYlkTpJJOCgvjWrfgrAu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598149, "uuid": "36bf2471-8021-4ffc-9097-b95986a0be0b", "value": 67484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598149, "uuid": "6aa036c6-56e5-4773-af0d-770cec62e0e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd59f8f9-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "c1a1b26d-f746-4155-8e45-bcc236e61c4d", "comment": "Malware payload (Mirai)", "value": "f13092aa118024f6fa53382049e26a69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "b16ff07c-82ee-43ad-9df1-952af82e8971", "comment": "Malware payload (Mirai)", "value": "743722b02dc5adc93f53a49dea1280ce7a0d2da4befaed81d90877dbadca96ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "a879fcb0-f527-4938-a18e-8122ebb4fe89", "value": "T19EA2E11573A32D56F3ED1C3CC96A8367F9A61BFCD0F6327679415620C90D20A3E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "f556177d-72f4-439c-aef4-4bd1e94586fb", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjas8ewhymdGUop5he:TvQn4j+ZO5fKAlxfws3UozQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598152, "uuid": "acc45049-a843-4a49-9fda-0d108ab5eea3", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "05828c3c-cd8c-43b9-a23b-8f957004e694", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd6995ca-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "3b7429a2-c384-47b5-aa56-7d83320f3dc5", "comment": "Malware payload (Mirai)", "value": "b6d15234b011aabf653b829e560199d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "958ae801-5a92-4e6b-8bc4-59b1f99ec664", "comment": "Malware payload (Mirai)", "value": "b0d9af4b5453d38919f8859f800494ca79619e1e9ae727685660ebc80de4cee4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "e73a2dd0-6429-4341-b89d-87ee03d2dcda", "value": "T10F430852BC818A05C5D412BAFE2E11CE33136768E2DF72139D106F247BCA92F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "fbad837d-c59d-42a7-a1e8-9fc2f9166656", "value": "1536:ZVnsP+SiPuXJEbiaNV82/rKGpoSEpLWIxibJgwKWFK:6kPcmi2V8M3pZJgwKWFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598152, "uuid": "4a64d846-1a41-4459-b8a0-d62b13fd69c7", "value": 59680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "613250ac-9f89-4f6b-bbb5-c68726b9f4a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd71c6a3-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "630e015f-faf0-4d84-9de1-fe8a1f9167c4", "comment": "Malware payload (Mirai)", "value": "27cdea0d786b16db14d89e3620cd26a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "2f439964-3920-4041-bbf0-9d6e52b43e12", "comment": "Malware payload (Mirai)", "value": "771aadcf43022f7a83447f5d283a433a1494d04bf9b0672fa213f7a197d6469e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "91d67ce2-5ee4-4aa0-a16b-54d28813908b", "value": "T1F782DF3061AB74E5CBE04434EAEECEC697160BF8D1FC36E317586B78894610661F93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "efc499f9-5a62-4eec-843d-7c4a27bb81e0", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaSKhymdGUop5h5lI:2dV0P6+kom0tVAoNvm+to1SKs3UoznlI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598152, "uuid": "b2978d2e-5ebd-4104-8140-c19e4e40740c", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "94cf6c9c-7784-48a5-8261-2e798c056d6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd73b99b-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "6d30aa5e-8a86-4062-8d96-41f3a146412d", "comment": "Malware payload (Mirai)", "value": "5e11addca3b947b8f92253d75cdf2463", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "4d24aae3-4d36-4c2a-919d-37e734a9ca91", "comment": "Malware payload (Mirai)", "value": "368432b257c5c5c4bc14d567e68215db21c996fd9c62d2d51fb4b99607c36bd1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "908264d1-d760-42a9-939f-c249918022d2", "value": "T1B6C2D0E07726FA31C4206C3DE52A4C8A3A51167C91FF353664268C36CFC165B67E84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "3447221d-2256-411d-aa9f-b0de07991599", "value": "768:4MKyhegCCMqfizjoNpd2vJdX6vwrd9q3UELuw:PKy4qfqoeJdXWgwLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598152, "uuid": "f36a9966-ffe0-4592-a1d2-8465518b183d", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598152, "uuid": "1a5a30be-38a9-4766-ab8c-fe2c43ef6918", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01f5a88e-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "cdf63bc2-09f5-4ecf-b35f-dcf543ae14f2", "comment": "Malware payload (Mirai)", "value": "402e6391dde2641ca58e5f8e88bd8660", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "d734c84a-1224-4184-bb72-8af3c480f2e4", "comment": "Malware payload (Mirai)", "value": "f4fd4798538fdf81187394775c0a5863e25f31e362fdff538a39f1fd071169b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "d98e6244-b03c-4f28-b40d-207ece8e72d9", "value": "T12A13F796BC829A66C6E0637BFA5F418D3321A3E8D1DF3257CC112B057AC991F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "f3aa39c6-8db0-4ecc-9f1f-8e1062103d18", "value": "768:XP7T28mUGj57T7lq1dZuhfHn41GC8saIDoCerCIcW138vYPDX/heg3OgGytZPNaI:XjHm55TZ0v8sUcWh8IDX50PyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598160, "uuid": "ea9811ee-aa06-47be-9cf5-181980de3217", "value": 42880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "dc8545f1-7af6-4097-8c6f-f22f9d1ea096", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01f8484a-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "1675bfca-1c9e-488d-84c5-a1b3f876892a", "comment": "Malware payload (Mirai)", "value": "9aaaa6388db936704e40e1884631a657", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "07ef3d11-6f8d-4877-8d29-854a1ed1ad6b", "comment": "Malware payload (Mirai)", "value": "525b581c56077ab9950714aebca0035d9ba428a0cfa1204dfc6a1798f3e684d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "592cde72-608b-4f72-b455-28121fdb304a", "value": "T1CE138EA2C06DAFD8C1488674B8284F781B53E445C7536FF99AE985A68047EECF60C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "06654830-fad9-455c-b2b1-70abb1f84d68", "value": "768:NanapGwtbGbh/EEZYePDznRVrgrq7OhGdv/qzCvoBJbCb:Na4Gwtq6ECrq0Gp/qzLLbCb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598160, "uuid": "b0cc1264-6a25-4e42-9289-2cce2353fdc1", "value": 44348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "499f62c8-1b7f-4715-96a5-7bf0984cd7d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01fba9d3-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "cdbe7b3c-c8da-4f2c-b006-b7f3167e8aa1", "comment": "Malware payload (Mirai)", "value": "0ea6389bb7f95647bef865593c31382e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "b638cfe3-964c-45a8-b9e1-15f3d24b6e0b", "comment": "Malware payload (Mirai)", "value": "bac09703a091d0456aa58b327ff2e8a3d8a0ad3f991809597f6e386c9e3ed673", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "b46bb0d8-3c2a-4588-8031-8a0847471d54", "value": "T169232B42722C0A47D5A25AB0393F0BE093FFE99120F4B6892A1FD7468635F771586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "8488a577-6f1b-41db-b19a-069bc55d4e20", "value": "768:fWLJhV3pc1tbRC+3u7RsGVBCnfd0aC3E+n8Vdk/fEXIZyq:fIRpc1tbR5kDPAMcXkb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598160, "uuid": "f12b67ab-08fb-4bca-bc03-ab05f8905178", "value": 47140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "7fc08ada-87d6-4297-88f1-6b5766ed27bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02051bcd-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "eb207d39-700e-4139-834e-48fa520e195b", "comment": "Malware payload (Mirai)", "value": "c0c4222c8f35b8ac9c1469456632ac7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "4f88dbfb-4978-4646-8312-b9396c732be0", "comment": "Malware payload (Mirai)", "value": "f0aa0295af1c6645bb9220696162925737701d64f9a4ddd26c5af1e7d5179d08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "65bafd9c-92c0-4f30-8d6d-3cecad1e4fad", "value": "T173432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "9e465be2-9039-405c-af61-9e5910872c22", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAw6:RqtmZPuutfbltZFBSJsBcfDSTFI+BE6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598160, "uuid": "71f8f71b-fc96-4214-bc90-802c1b707dce", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "332a2cbc-d987-4911-9c39-5dd3fe0f91f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02067d98-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "2a50d9d1-9982-4e0d-a470-eeb6d28be562", "comment": "Malware payload (Mirai)", "value": "6ae2368f0eb015733c33568f5b050889", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "b27390c5-de4d-4913-87fa-2ee78f135437", "comment": "Malware payload (Mirai)", "value": "68e76ee280f9ee1a8058e6ae096df03f3262c99118405dbbf71fbe2a956c8572", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "d2ea3080-e32b-4678-8012-3141340f4c69", "value": "T15FC32C56EA818F03C4D61776BAAF42493323E754D3DB730689186FB43F867AE0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "4b884072-f932-45e1-8c20-87813c4374a6", "value": "3072:lgU/44TM2nDQwI25oFxhYJn6ZdI+oV+M/900i/:eU/44TMKFx5oFxh0nyI+okM/9xi/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598160, "uuid": "4912ccaa-ce44-42c8-9c62-770ee4b51f67", "value": 121479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598160, "uuid": "7f008030-788d-474d-8d6e-c6b117e715e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dc9b7a0-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "3682fe4d-d525-44f5-8d14-0366a4aed214", "comment": "Malware payload (Mirai)", "value": "04c0b5de172192d14bc41053d71dcbff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "1eca486a-9665-40f1-95ef-a3e367e1bc4c", "comment": "Malware payload (Mirai)", "value": "1e93a1b045d266e2f6ef682e3a3adaa6f1bad57374cb0bc6f7f3217bb97bf379", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "e1c13116-33f4-49c5-9120-3ed06bdba029", "value": "T15CA2D1BFE8D64997DDAAE43B011D00CA50BB5C5413A783C23FA535B389778E8F8366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "d5624e1e-711d-403d-ad0f-68dc0e0513c1", "value": "384:MccDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/rW7MM+v1RpH:NMkKJFH39CBVQey7qsZoMTC7EpH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598180, "uuid": "4dcab5ee-5657-4a00-b6bd-a68be248d6b6", "value": 22448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "7d297c93-d3b0-487f-bca1-fcabefbb7051", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dcae8c5-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "fb728cf1-915a-4428-8b17-67c9b59e7495", "comment": "Malware payload (Mirai)", "value": "e4c6e868893b0e0cf8c16011cd4ec654", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "726cfa13-b6e3-43ca-aea6-dda00f8fdc4b", "comment": "Malware payload (Mirai)", "value": "aa12aa6a2cfcfb07c2690c08910ba7f11e38d47bf17b520a144f65ab94fbaa35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "c3ded556-6439-4c1a-bc30-ae2e53f24e47", "value": "T1C7A2D019BF58828BC832797455D9F5D22297FCA1F29DCC4E2940C15FF0A33A96434E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "c4a5d9a5-abd8-4e54-be17-98adc8f794a2", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTK:798o08kxofBE+ZkXaITbp2F2TWul0c5+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598180, "uuid": "19748c79-22b7-412d-bf28-5b277d23f611", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "dd7fe86e-05c1-448a-a0dc-a8e9902a6e68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dd146ae-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "d33aeb5d-1c7b-4685-a993-e48839c8ee3b", "comment": "Malware payload (Mirai)", "value": "a036b86af2539bcbed700f886c2d14da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "87dfb8d9-b333-452c-a92b-a66676a74ae2", "comment": "Malware payload (Mirai)", "value": "b68e24a063ebec3653680e9cbac7b5c043fd18c96b0df3affeefec21e504bd77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "91982296-7e38-4690-a1c9-00d87177d470", "value": "T16B233BD9B801AD7CF95FEABE8016490DF621335051930B2B63B7FD936C321A4AE63D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "9cc76844-b9e2-43d1-b837-f2d70f8ae0b6", "value": "768:yLeD1MYbZs5paE+IXEM110+fmdbuzWenXpIWxJTBE2Lc85t:GAaY+5peFu1hmdCzp5IWxJ1E2w8L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598180, "uuid": "43a70bfc-948c-4b44-b5f4-1632e8f67db5", "value": 49804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "2bdc7ab5-5803-436d-ba72-18d885c367eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dd49d1a-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "1715d025-2bbd-4065-afe8-284bc9d52304", "comment": "Malware payload (Mirai)", "value": "e4069c8dc576857691cf03976f13bca2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "c0cc6411-1ca6-4df3-aa07-4d009982493a", "comment": "Malware payload (Mirai)", "value": "dbfbf959516d69fc3fe2a022e6bb9ee4cb244616cde4b37d8f6ff63d14c20c5e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "6c041b4c-1f20-4059-a437-ec7d0595be80", "value": "T1BCA2D025E346AEF4DFAF5D9452C2C2C2B7F547CB278AC8E340EEAF016506046BB48D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "b0762c12-ee17-4625-a612-87bcc629899d", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5LM4uVcqgw05VxJV:9RxsSVsMD6xiJJE5zRWNu4uVcqgw097", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598180, "uuid": "c01c38e5-791a-43c0-a3fc-0426699521d0", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "83f831df-3062-459d-b30a-71f28581fc02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0de417a4-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776598180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "8f9d1e37-6026-470e-ab0e-82f095b33497", "comment": "Malware payload (Mirai)", "value": "3a56c27e73b3230fefb877d6e5e27119", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "f2d200eb-7548-4586-b6a0-5e6310ffe9a6", "comment": "Malware payload (Mirai)", "value": "a8cd372b8bb16c7a092ca336f85d5d8184c6194cdc78bac9a754e9192f20f278", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "14d75f36-9fb8-4a38-b70d-6da2d913f3f3", "value": "T1D3237CC0A543D9F8EC150AF43173EB329B7AF07A2129EED7D795A432D842702E5472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "0b6f37a8-e0fb-4091-89f3-cdeb27684b7b", "value": "768:gjo8WnBsux3TUi32+4qbBYSWLxD9NnbZrYMbJoSlO+Meb4ay:gWBsux3TUiG9qbBYSWV9N1Y8JoSlO+1P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598180, "uuid": "86de8318-2204-4cb7-a726-0f644e7778ea", "value": 45656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598180, "uuid": "1449a7c0-d3af-411d-9d8d-1eb2b4c4cf56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05500326-3be4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776598595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598595, "uuid": "1962440d-45b0-46a0-80e9-76add2aff8f3", "comment": "Malware payload (Gafgyt)", "value": "ab7711ca64f06d07a6f76f361458a89d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598595, "uuid": "f154c870-ea0c-4e22-9f2b-c32d7adc1611", "comment": "Malware payload (Gafgyt)", "value": "7d118a9c48e9b0872cfbb4f96fc8663a18b659cbabb629a3bdff39652179c7a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598595, "uuid": "6587cccb-1889-49fa-8898-ce39a853c84d", "value": "T1ED63D50AAF654EBBDC6FDD3706BD070530CC594722E93B792874D82CB65A50B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598595, "uuid": "e537170f-3c29-4322-b4cd-22e8a89d3855", "value": "1536:fGQuan44XqjrlbpmF2o8AUVckfHZxbSESWZeJNuebBZBNYnj0C:eQ5nPSbpmofmEhIdBjE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598595, "uuid": "dc535610-d79c-4c34-b8d1-bd06a7141a62", "value": 68476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598595, "uuid": "e48caa2d-9f31-4627-b2de-7ba2617a1804", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d6ad2df-3be4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776598823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598823, "uuid": "48072426-9d99-49ad-886f-776fc189123e", "comment": "Malware payload", "value": "b203668f0cfbfd3bd06ce7f4f1b68d0b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598823, "uuid": "b19053e3-192a-4c33-8315-21476189f197", "comment": "Malware payload", "value": "62db863c13494f24e4be08df3962466a15a32bd078dea6ecb13306c400dee1e4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598823, "uuid": "7c6bec24-e627-4c89-95e4-8281d85a838f", "value": "T19CD3DDCDAADE84A48B5F64284A1F1C128ACDA137061DC9C0BEDEBF543F115B139FA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598823, "uuid": "a7afe882-714a-47af-ae09-50c61374a9bc", "value": "1536:IgQkQ4/uioPe1mfXF46U7tX3dS/JCJ934YmcDSsjl:TDTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776598823, "uuid": "4a31f088-a7d9-4b8f-af1e-e15c6a50c893", "value": 134371, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598823, "uuid": "121c0fb7-e7b2-4ef7-99a6-6e245161a36a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38d2d017-3be6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776599540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599540, "uuid": "ca5730d1-308d-4560-8e3b-8889cdfecdb4", "comment": "Malware payload", "value": "b7155734f7d6e0193c26d3a676bcc50d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599540, "uuid": "25d9abb5-9dd8-435d-b2d1-65f9af7ef343", "comment": "Malware payload", "value": "680d1cf89c7c487bb0cf97f9793a5ddda5f8d47e9e6618601f848502a11c3e06", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599540, "uuid": "9c5cb86b-1873-4d6b-a8ae-44d4ab26e423", "value": "T145D3309909DF00EA4B9398A441FF8C5BEF75832E020CC6D57B6FEA61AF15990B0BD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599540, "uuid": "6b430651-d8d1-4d6c-8791-718de7ce3bb1", "value": "768:YbHw8JoucZdiY8oSmAyX4EU9QEt7ZNRVWPnlHrKdub/JsGFvMdyYsc877GW2151p:yH/fY8oSFqmdub/p5MPApitA1lZh8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776599540, "uuid": "6fe4d0ac-9ad0-47aa-bda6-9139d495714b", "value": 139625, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599540, "uuid": "39dc7797-e653-4740-b8bd-10b0e7c75b32", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f48cfb7-3be6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776599685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599685, "uuid": "089617a7-2be9-49d1-a87b-b1b8d7576cad", "comment": "Malware payload (Mirai)", "value": "f9813bc18e2e83d1daee3174d413a002", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599685, "uuid": "63e291e3-2de7-4304-9421-e1d74612f1cf", "comment": "Malware payload (Mirai)", "value": "e275e7547d47bbbab2915bbefa04595e111f4950b44d16c857820e8e996370d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599685, "uuid": "61b722a8-c5ba-40a1-a25b-da1cbe6748bf", "value": "T13FA2E17DFF20C1CCF086847E2957167B456FF8A64B98420E6A15D0C701C39DED49AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599685, "uuid": "93eba1e9-7cdc-4d82-a355-11cd914a9e39", "value": "384:TDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxU+ch:TDZ5Dw7RjFjcU+O24sDS4HhrhpEguX32", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776599685, "uuid": "8a95b9a7-16d4-4ea5-b4dd-bfda0cdfe212", "value": 23260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599685, "uuid": "88294863-ab9a-4ea8-968c-81bde165dbc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23c141c1-3be7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776599934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599934, "uuid": "946888a6-cf99-4ce4-8bf9-f9682c159312", "comment": "Malware payload (Mirai)", "value": "953875614fec2a7b7b308ada235fd391", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599934, "uuid": "80e6fd9f-02bc-4c21-950d-e17d254f768d", "comment": "Malware payload (Mirai)", "value": "b646fab71b5e93ccd80b61786fd193086be21158ef8e25f8ff76468db55cdbd2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599934, "uuid": "5b29ca8e-55bd-46f2-8fd8-cb9ffd01987f", "value": "T16CB2E16C50940E09D85B40FF9ABE05E6E66184834AFFCBD99F270CC3E2B74A2791C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599934, "uuid": "df517e31-f977-4505-9483-f32e716a3717", "value": "384:MniiBi3f2PSrf64K5WFSlvNjJ6mAN8bhmglJbN2EIKHT0P6+PbhDYOK6sNrUeCVn:xiBiv2PSbePxNNw8dtlJwEIGT0P1PbhD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776599934, "uuid": "e0e58bb6-4768-417c-886a-f79f1c508bfa", "value": 23440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599934, "uuid": "12627a94-3cd9-4ce0-9bec-1e2fc9403a34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d867649-3be7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776600058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600058, "uuid": "c62d6313-53ed-4d7d-8a02-4945b7e44e87", "comment": "Malware payload (Mirai)", "value": "84d956dca249fad496c7c3403c136b64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600058, "uuid": "513d7a94-6c88-4a07-a975-5255bb942142", "comment": "Malware payload (Mirai)", "value": "9a09f53dcbc60348d8d4f7c241aaceb98cdd3704db0a1a0a34b54b0a1b220289", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600058, "uuid": "1e734f20-56f1-476f-a29e-ae38edad6efe", "value": "T1C063C55A2E358FEDF66DC33487B74A30A7A923C613E1CB84D25CD1055F6024E946FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600058, "uuid": "4901b56a-d6cd-49ba-9bd6-5e12c1a34327", "value": "1536:h4dE4AdWMXTP8fC7D93+1Q6uzazsKTweDLVr:h44XTP8K7l6uzazsO1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776600058, "uuid": "ad2daeb9-d11a-4247-9706-7f9c853a87c2", "value": 68476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600058, "uuid": "60a0510c-d7c8-417d-9a00-bf3ce7178072", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6871f32-3be7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776600288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600288, "uuid": "f131d578-7c1c-4be8-bf74-b55c84d1e9a9", "comment": "Malware payload (Mirai)", "value": "25dd5d143bf400c469477d331ccb6eab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600288, "uuid": "12212715-486b-4c4e-81a5-e1ed1f4f9cf3", "comment": "Malware payload (Mirai)", "value": "2d8e362fc9ec5e45d11b7275e53f91bfd79a258f5d89df780cddc650dbdf1fa3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600288, "uuid": "f2af2ea2-59fa-4224-9505-08ed68bf5bbb", "value": "T111E25945BAA3D5F6F88600B05877E7B29A7AE63D1074DB4BD728D636AC43701D2073", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600288, "uuid": "586312ef-36a2-4721-b7cd-cd237341a0c3", "value": "384:f3yStNtRbhaEOLaeOzb8Tc5RsGhu7Dl/1mUL9l697cdgEZVJ5C0DrgbhxKwLxhTF:KStBbhatSvR4FPL/morR5CA0bhxBLxu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776600288, "uuid": "9a19742e-5a02-4589-946c-2ff479efac69", "value": 33952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600288, "uuid": "0822f723-d0eb-4d08-bb29-3f07326e4553", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79c64a7c-3be8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776600508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600508, "uuid": "e7fa6311-028b-473b-9a33-80d79c3fb169", "comment": "Malware payload", "value": "9b4c0f35ac343f8cbd90b23b8e5ac002", "object_relation": "md5", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600508, "uuid": "7ed50969-bc3b-42e1-a9c7-ca1a7caa6e00", "comment": "Malware payload", "value": "5ba6b5df1a70bfdfe0846e0445b91a5b7c94b7e477cf197c499983a52cc3248a", "object_relation": "sha256", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600508, "uuid": "1c9679f6-2ba9-4287-a64f-92ffff4cca3a", "value": "T18FD302C88E9EC8A89B1F6468051F5C178B9DE227021DC8D4BEDDAF443F165B478BE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600508, "uuid": "73df0525-d2bb-450b-9abb-9182d3d48a82", "value": "768:m8hThLB3eeC+st98XV+19NWi7RVtmbdrbcoH7646j6f6g6Q9yqf16tnDevP5Ew5W:NhLRZvBqlsuMs06", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776600508, "uuid": "daca1622-67e6-47b5-a0a2-b7b697927f35", "value": 132925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600508, "uuid": "15cf28bb-e423-4c96-87ee-3124f5a22d1e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15cec446-3beb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776601629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601629, "uuid": "705d7e19-49f2-4dcc-972f-5d708cca62d2", "comment": "Malware payload", "value": "54404cea5f36522cd5a98e562db76051", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601629, "uuid": "82c4423d-4977-41b4-b153-d8cb317af985", "comment": "Malware payload", "value": "22f4db8ee45b3a432465dbf79cdef20e4a1e333c4f3b796b22b885b6b884d9ec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601629, "uuid": "32d3800b-59b9-4951-9979-4ae73c199245", "value": "T1EA8308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601629, "uuid": "d2fc63cd-16da-46fd-82a4-4c1b9888f7f9", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbncWazVN/:XEKltp9txAX/yr2pbcWuVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776601629, "uuid": "79897d83-af74-47a5-8a32-60f89772737f", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601629, "uuid": "3675f6b3-2901-4d3a-b97f-d5783251a69f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c60f4d8a-3beb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776601925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601925, "uuid": "495470f2-a9a7-4fc2-8dfc-b03b2a77be2a", "comment": "Malware payload (Mirai)", "value": "b4e27671d82e6ae322f070c28d06267f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601925, "uuid": "541ff879-cc09-4bad-8c9c-71a3cd40c7f8", "comment": "Malware payload (Mirai)", "value": "6c701d0cb78138c17a4421173aa01563a9a3196227bf03d5f4dac4e4c05f28fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601925, "uuid": "c6885c1e-b5a9-46fd-b39b-e031183bf570", "value": "T1FB237B63C83A1E08E16A92B0B174CF7553A3E45581675FBE262AC3B99493ECCF5063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601925, "uuid": "d686391a-1447-48f7-b24e-335adb0f5b3d", "value": "768:s7gBx8oaAyewvovopyTk6qC0IuKqEETa7PFolofKqYgxo7I:fBx8FAyeU5p76qCcKqEEe7PEh7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776601925, "uuid": "f3f204ad-5428-43f9-b383-5069757865bc", "value": 46532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601925, "uuid": "5a6e2580-7685-4720-b4f1-4abb3d1521ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "707fda13-3c07-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776613807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613807, "uuid": "7986ed04-55a6-4465-b90f-7c5f5ede8f0f", "comment": "Malware payload", "value": "a271b67a20aa571427de46b3da870ec1", "object_relation": "md5", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613807, "uuid": "38e0e003-bb8f-452e-b9ad-7b884d7ed8fc", "comment": "Malware payload", "value": "5c595e7a065f3c2c6461ccf2f084b81020cd3aed5e2539960d21453af7b11756", "object_relation": "sha256", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613807, "uuid": "26c04acb-306c-43ec-88c2-ec79a5ec91e8", "value": "T1E341114A2522BC276F4796B6CEABF7DD306335D3D2209498B0CD69512F6D1103B94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613807, "uuid": "6d8f9c33-d513-40b7-a591-99b791c84ede", "value": "48:PXwHsIJBYa82C96GNpYMzvmgT1kC/B10Cs/CVbLuH5VS1v75//X9W5B13JAKo1vO:YHsIJBD8t4qWi+WWQUB/CxLgVK75/v98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776613807, "uuid": "5e841f76-bf8f-4299-960b-45b914690783", "value": 2404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613807, "uuid": "aefb048b-2e22-43a7-832a-f3b57fc96ad4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "751d0312-3c07-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776613815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613815, "uuid": "af98be2f-9ed8-4e59-b2e8-88f820995669", "comment": "Malware payload", "value": "9ec73c2113dc3310519b274628d4a170", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613815, "uuid": "14798159-a225-4b9f-866e-d56af8315e94", "comment": "Malware payload", "value": "b226fa626b9987295ae9fe523a6ddce0609f3c53a426e00fcea53c8c821bb77e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613815, "uuid": "52396bf1-195f-4ad5-b643-0257366e084e", "value": "T19BF5238076950136F5EE06358A35BDB06A3AFC105BB08A5A334AF3BC1E3F791D535B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613815, "uuid": "88c8aed2-ca3c-4545-a249-6b1ae5d6f8f4", "value": "98304:SBkFzdzZJe6Ueev0ShdIu8t8oaWLb+VCbiLDHs7WZkLneEr0e:SBqu10STImVwNgbULzr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776613815, "uuid": "a5861328-d7f8-4d4a-8d2f-dc9f11e1f380", "value": 3346432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613815, "uuid": "b40f79f0-d915-4148-b4c4-93277b035fc3", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db20fbe-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776616460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616460, "uuid": "5b88258f-4a7b-437f-bbf3-e3b81345b55a", "comment": "Malware payload", "value": "96da3fcdfecf185938f2863751ada37c", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616460, "uuid": "83f0c6e8-b477-43f8-98d7-9b0b13be1d17", "comment": "Malware payload", "value": "d177cd262d9c52a9e66cf3cb1e41afbc6812e9a7b69af4a2d92a59fd2e0ed60f", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776616460, "uuid": "495436d9-bf8a-41d2-a4d7-1601f03dd1f4", "value": "T12C56332AF43819C5E827C57FA0F22AD541A1231FD583E47AA6913BD8F1E37C908CD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776616460, "uuid": "d826b061-4386-4909-8e15-08dd0cf52b39", "value": "196608:FlbHXUBZftn6/vDP8gF0uU+HB/OGUElH6XU8Yk:FlbEBBxIwCrU+h/PUEl0U8Yk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776616460, "uuid": "5482d16f-632c-4d60-ba1a-36adb947dea5", "value": 6459071, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776616460, "uuid": "6a19f6d5-dc61-4f1c-9945-18fe4a80fcb3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d2cae64-3c12-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776618419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618419, "uuid": "a39d8d37-b46c-47b0-abe1-f09ed98bf47d", "comment": "Malware payload", "value": "7aa481cf77d832045893bec88e3415c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618419, "uuid": "c3c31cd4-9755-42a1-876e-393cea0fd382", "comment": "Malware payload", "value": "092a6abf2b6dffd50ff2073d4a465a56d12ddf505cce8606a5abe806e47d794b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618419, "uuid": "f33d5538-3b5b-4ef8-a488-fc0242cbe9fe", "value": "T15F931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618419, "uuid": "5b33a4b4-87c9-4c23-b6da-596fdebf9f95", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKz0sCxKnoh:n8iIL0GitkbFv2v05xLkr60sCxgoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776618419, "uuid": "c50e1a4a-a085-4ccc-a7c1-1f4f22a94975", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618419, "uuid": "e539e25a-20d4-49da-83dd-ec9b835c57bd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a415b451-3c12-11f1-bc00-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1776618618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618618, "uuid": "cbf5c3d2-b490-43df-8f05-a6d325a291cb", "comment": "Malware payload (Tofsee)", "value": "e0e12f88dc7ea462a9b9fae1fde51ee7", "object_relation": "md5", "Tag": [ { "name": "130-12-180-119-8080", "colour": "#cb7cfd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618618, "uuid": "8873f0da-3e2b-4a1c-ba55-cc56ff89420b", "comment": "Malware payload (Tofsee)", "value": "d890d8e83ddf23c730cfbaa368e61127e15a653fca416e899b1f5115df6bd710", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-119-8080", "colour": "#cb7cfd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618618, "uuid": "83219b3b-546d-451f-b715-8deb7df8788b", "value": "T18BA60133B28A673DE06A5B3759B2D2205C3B7A21A55F8C16A6E40C4CCF2E1A01D7F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618618, "uuid": "ef79e2ae-8da9-435f-9718-0d8da4e73d8d", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618618, "uuid": "be08f42e-6c81-48ff-873d-12ee87e4615a", "value": "98304:YN66TNlPw3yMvcc6TWORTlgGOrbpMnJKv:cJlwbcc6THRgGOrb6J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776618618, "uuid": "388fe260-70f5-45db-8168-a158a57f05a2", "value": 9920369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618618, "uuid": "7377ad16-49bf-4561-adcc-debaac0fd60d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fff4b7f7-3c12-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776618772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618772, "uuid": "45a582b3-d2f3-4940-ab01-14c5633065c2", "comment": "Malware payload", "value": "bb317fb47404e3b308114fd348ba87f4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618772, "uuid": "10ecc6ce-3d03-441b-bcfe-dfa3fd09c685", "comment": "Malware payload", "value": "7ca24255c54e53101cca4682fce67ac154172995ab1cc447e96bd1f5fad73d6e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618772, "uuid": "e94d3b41-587b-4bdf-86bf-c50bf473e7a8", "value": "T14093E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618772, "uuid": "ac50dbbb-30da-4e52-8c60-1e0952aad37a", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXJIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776618772, "uuid": "161a343a-dbd8-4da9-80d1-7957bb65e481", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618772, "uuid": "ce120780-8775-4ebc-94cf-035e777ab784", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8179cff0-3c14-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776619419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619419, "uuid": "34fae796-f33d-4077-a514-74a75097e40a", "comment": "Malware payload", "value": "e81b0f5a54cb4b44f05d93c84128ab89", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619419, "uuid": "7ccf7601-aeff-4557-978b-ac40c0895f59", "comment": "Malware payload", "value": "671b028033d4123f85d64c3c60ccf1f3057bf1e80b3189a355950ba6144ad256", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619419, "uuid": "4658745d-0c48-4d11-a427-3d7c939dd164", "value": "T146F733F4AB02472DD71A78761B9928F9A82C6359DF53093129CC8E63F05AC8C9BD5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619419, "uuid": "f192d097-4e0a-4468-b784-bfd9838e2853", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619419, "uuid": "a3f9ba42-9d81-4ea7-b138-85fb9dea9432", "value": "1572864:nNLdk5rvDIIAIWXGy1Qn3f0To0KTVFEPUnA0S+xk15jhrc3EuK7:N2VbpAIW2y1wyo0K5FH6VBhrv7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776619419, "uuid": "1bbd6ac3-f768-4f75-acf8-7188f724f026", "value": 70148190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619419, "uuid": "76bcebb0-037d-4eaa-826d-d4155182f155", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e991a7a2-3c19-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776621741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621741, "uuid": "95512e55-435c-4503-9a85-69e5ba97a46c", "comment": "Malware payload", "value": "457f16ed0b4dee051bcbcc914d6df4a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621741, "uuid": "d3abc9f5-9fa7-4038-ba8c-7da43523a56d", "comment": "Malware payload", "value": "df6557b17ac111f4e2805fff3bf4aa8adf3dc69349e5a3bfc4fe71d69364accf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621741, "uuid": "14bf15bd-928e-468f-8ba1-b01a5f8eed0d", "value": "T16C04985A6E228F7DF278C73047F74A35976D23DA27E1D684D2ACC1141F2029E542FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621741, "uuid": "8680a33b-1944-4842-8439-39ecdb4fee93", "value": "3072:p5lv25E8XMsVLGLDluS94yDTfjaC7LsoVpZDQh:p5WXNqfX4ib+C7LsoVPDQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776621741, "uuid": "9b6512f8-d961-413c-81fc-4c35e04ca451", "value": 174548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621741, "uuid": "d42d6e52-bc83-46e9-a8f0-9c41bc4a37a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4395296c-3c1a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776621892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621892, "uuid": "1902068f-ef42-43e3-b9ad-df6835554e2b", "comment": "Malware payload", "value": "bcf707269f018cbe3e8532242ce8feb8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621892, "uuid": "7e591514-25e2-4aa4-89a3-a60a599893c0", "comment": "Malware payload", "value": "5a0bfe4a04c65370ab29d3d1dd461a32abbb6fd7e1a233da7fad503b44521c29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621892, "uuid": "7f4343f5-06a7-4e7d-9fd2-235ad8ccd297", "value": "T1F1045BA8BA0F6C41F1C2D3F9DE4C87E17E1735E3C77689B1781212EDCAA39D95A905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621892, "uuid": "155fc9fe-41f1-41e2-aa16-4677000ac7c7", "value": "3072:TlPmnrnMzjlIImTyKGakNoGs7N/OdCVpv4MMkMPoq:TlPmnrMzZIImTTG9oN7N2qv43LPoq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776621892, "uuid": "bd945573-f791-4164-b607-f179ddcf8970", "value": 186352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621892, "uuid": "3e639675-92a9-4f0c-b367-40db6ed9720a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e37890d5-3c1a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776622160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622160, "uuid": "33d2726e-1fb5-419f-96e6-e2d72c9fa053", "comment": "Malware payload (Mirai)", "value": "87ec8eef253db199e9b3581199fdc0f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622160, "uuid": "fbd35aed-2aca-4187-83f6-637e96e39ca6", "comment": "Malware payload (Mirai)", "value": "777fa7a5ce1ddb68c68425f0fb30702240f9798b77909e91eab1264cfe0534e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622160, "uuid": "c78c672c-0575-4bdd-8d6b-f2ca37c8da74", "value": "T114E3F7C7F900D9BAF809E7374853080AB130B7A248925A376257357FED7E199147BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622160, "uuid": "deb07e92-fcb3-4af1-8a89-d43c70f4f010", "value": "3072:Zo8ut4vWSDde+QPyWaYW5P0g8VF2gehfQJNQtVxjbixLlJeWYP2Tet:Zo8lWUePyWXW5PD8IfmNQULyget", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776622160, "uuid": "b120e16a-8432-49e1-a3d7-cca2628e51e9", "value": 156504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622160, "uuid": "15b74704-ef80-4742-a60d-ab5e720b9218", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9d28874-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776622976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622976, "uuid": "365d7ca1-6186-4735-92e7-c4759232d441", "comment": "Malware payload (Mirai)", "value": "5e4061bcd49f36c9217d75e9ff9d461a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622976, "uuid": "4d3e821d-1e1b-40f2-b06b-547978e892b1", "comment": "Malware payload (Mirai)", "value": "3bebb59e8f7976cf6c37bf78ed2d7228518ab75fbedeef162f1e8a057b669e28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622976, "uuid": "e1b0759e-84ba-4eea-afef-df75199ccd83", "value": "T121B34A63CC256F18D625E5B8B1B08F792B63A96095871FBE1577C2788083DCEF5053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622976, "uuid": "32417025-da11-4026-a06b-20650b06df26", "value": "1536:sLUh82jwPOnECeKVNPq73O5TsQyesMfWywpkQdroOqbb5:9SrmnEkVEWTszYfWdpXrbqf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776622976, "uuid": "e42195b8-2c7f-4406-950c-d4839aecf8bd", "value": 117368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622976, "uuid": "582465c7-87b0-46af-97ca-cdd062db9696", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b051dc8-3c1d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Neutrino)", "timestamp": 1776623166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776623166, "uuid": "ed514019-d3d1-4abb-8054-e4e8756a3446", "comment": "Malware payload (Neutrino)", "value": "21be80c278110af8d5a3fb443dacbca8", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Neutrino", "colour": "#a1fb00", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776623166, "uuid": "334ea8a6-17bc-4507-9b20-02bcb4c74951", "comment": "Malware payload (Neutrino)", "value": "0270c76c010e9b66c19d2d06cbff2b95a7b558296afe8e1172cc001f4f3aa3ee", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Neutrino", "colour": "#a1fb00", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623166, "uuid": "cc8b3b25-3c5c-454f-bf36-93cdaed3b4a3", "value": "T142E3D0427DA4C031F877023804B982639B7E75879539A55B37A92ACEDBF13D56B283", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623166, "uuid": "0da80749-8a89-41c0-b824-a76f0c98c7e1", "value": "8d04b0f9db9f34761ca4b26f9ee1ee78", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623166, "uuid": "0569cf7c-c8c7-455a-8236-549bbb0576cf", "value": "3072:LbUMEpifpbGRxwgGr3rofZhkxU37ZmGb:LbUMpiRigGjuhkKd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776623166, "uuid": "8ca89582-9b7c-4278-8cd5-22d242c86b1d", "value": 144896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623166, "uuid": "e05d31b2-2a2d-4560-93a2-ab925447847c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4739f16-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "2a62caf3-8b40-4cfb-89dd-267f4610413f", "comment": "Malware payload (Mirai)", "value": "abd62c7adc4c299f4646035bca953846", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "e9a2d2e7-e1ab-45ec-be94-d489154e57e0", "comment": "Malware payload (Mirai)", "value": "ad00f7c4839fed1b274cbadc566a2c046e9e9d863728c9656c4d5b32a43825c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "fda5fa92-0573-462c-8586-02a00f95e479", "value": "T194042B02771C4E43D1572EF026F727F183ABED511AA6A640F21EFE886372BB15549F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "f29d9bc4-c4f8-43fc-855b-65c52fc5b233", "value": "3072:740edf8BxoZySVQGuIsgC1KDQlimu6J+Po2bj2/4NPzRj:7Qf8BxWVVQGuIsj15limu6J+Po2bj2/y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630322, "uuid": "7c3bb96b-f2e3-4a40-9bf2-6a521c6805e1", "value": 178394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "22dbb136-ab56-4101-94a5-89c4eb877ff7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4739ffd-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776630322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "383f7b49-ebcc-4e2a-92db-1db03f068991", "comment": "Malware payload", "value": "0206923fa3d5fe91fcf7ead13b5f2a6e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "62cc4d5a-d8da-41c6-b3a6-110a12714430", "comment": "Malware payload", "value": "b414841a635b29135309aa9ea17bd2719ee35f3d9a78723f726b4ab7e67c87f3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "094d81d6-5e7a-4b92-811b-7c22e65ab84b", "value": "T1025190CD63E04375B945B90BBBB989D07D4A50A5E6C10E2170E8BDB694CDE08BA0B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "85d7c551-82f2-4b23-bf04-4318d458a230", "value": "48:UAeYALCUApsYAVUCAtM6zJAiaAcEArrAuf9YAtZA/RAj1:UAeYAmUApsYAVUCAtM6tAiaAcEArrAu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630322, "uuid": "d5a94096-2a3c-4dac-bff5-bbd460577e80", "value": 2727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "2553d635-ef9b-459e-b8b6-a6b613db8480", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e478ed4d-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "5f613c8c-80b4-49d6-a5cf-6a09504d12f7", "comment": "Malware payload (Mirai)", "value": "1edf1360896c7359b538c55a653ea4e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "3fce403f-47df-4d08-8f86-561e1670b30b", "comment": "Malware payload (Mirai)", "value": "0cc324c2efeb80fe1028971b5769b3aae61955c4d67f51235f0167c40ecefd5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "990a7014-3244-4711-81bc-e447bfc83284", "value": "T12434F7076B958EF7C89BCE3306F6860120CEF4572564772A7378DA5CBA0A64F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "bb1f528c-003f-4499-b1a3-eee154bec185", "value": "6144:XpwxGmVxx4YmTz/CZaC5e+1mQ+NC6/DndnVLV9cMA:XRexxszp+1mQ+NC6/DndnVLV9cMA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630322, "uuid": "0ff9e930-ed79-465b-88e5-1e7ee3e63e0d", "value": 241481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "de255eb9-5be2-4f4b-be1b-b06e4ffa4504", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e47da9a2-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "11e91c4e-a243-4456-b8c8-344a7e592bd6", "comment": "Malware payload (Mirai)", "value": "ecbe24217a7aa5767f8884900446ff14", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630322, "uuid": "6879098a-752d-4c46-8631-e069944dadb6", "comment": "Malware payload (Mirai)", "value": "f68eed03af13aac9c0db3cfcaeb8fb7378e00f2ea50407a50d76cd7d478875fa", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "a0d44807-4849-47a4-bcf5-befd1a13d880", "value": "T170040A02B9158F53C5C22BB6FBDF46593B33671897EB3301AA18BEB42F4769D1E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "c433a2ef-aa7b-425d-a64b-4e32fca8ff66", "value": "3072:9w9nRuvQ3Fr4SztCtAbeUqFKShTSp5wsci2/NGgbrmK6C5PHJnf5a0cXl7wj:G9RuY1r4Sz0tAyUmKShTSSTrmK6C5PH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630322, "uuid": "7d0a81ff-55f5-405a-8cfd-ef2de1b463cc", "value": 188183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630322, "uuid": "6a69361d-25e3-4da8-b63b-95f197f9ac31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e480ccf2-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "582767a6-26b0-4fe3-b07e-02eb2c7ac6a6", "comment": "Malware payload (Mirai)", "value": "feb8e85b4d870a5a7f81388c1046b426", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "9c55b93a-aa7e-47be-a4d7-9df183e6397d", "comment": "Malware payload (Mirai)", "value": "cb0be0b6fc1043e14124b9903e9b43061f034e79a57f0c928438e4a164cf2a33", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "d0dc61c0-8873-43f3-ad74-169962e8238a", "value": "T1C234D71A3A21DFBFF56C863047F38A3046D576962AE19746F25CD71C1F2028E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "a0785912-e619-4d6b-837b-eecce409384a", "value": "6144:QF1ftX7UsAAMfXUfHnxmP+NC6/DndnVLV9cMA:QXftX7zAqxmP+NC6/DndnVLV9cMA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630323, "uuid": "ba1a5269-1dcb-4053-b1c3-522d21b34ddf", "value": 238476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "302f4908-f0bc-4783-a4c3-12f8871523f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e489d8a7-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "97416bc6-df20-4139-bba5-1b438f139826", "comment": "Malware payload (Mirai)", "value": "6dbb0f2be9e1e7165e8d31a52c071af9", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "48f1aa48-d20e-44c4-bde1-103d7cb9a7c2", "comment": "Malware payload (Mirai)", "value": "d2d4796b94fd8bdc26e6ba313fa4e9d98f6c58049c9ad8ce0366677ab5e560ce", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "3b0a6bd3-57b4-47f3-b688-0c0daef9ea27", "value": "T1B0140B02B9114F53C5C31BB6BBDF46953B33672897EB3301AA19BEB42F4769D1E2A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "a099981e-7706-4ecf-8289-fd7962f39e51", "value": "3072:R1hGdij/KOZ4im57VYc2/RQsW2HSMT0CamJ6CJaIJxsCa194ESBj:TodeiOZ4ie7VF2/R/W2HSnHmJ6CJaIJn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630323, "uuid": "c821af11-3882-466a-ac93-af9f4d667935", "value": 196182, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "71859129-7c78-4b40-a6be-9921298fb44d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e489fb37-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "6eb0b0d0-8589-44ab-9592-e6709bb7e4e4", "comment": "Malware payload (Mirai)", "value": "5adbf9ec765a02324c3d7ac53be7b661", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "377c0a9d-8ce4-4698-843e-f0ba58cee0db", "comment": "Malware payload (Mirai)", "value": "b83de41a4096346023ae98dbf944904fc99ed3e84d9f8741b323ab0de3f7225c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "1fc434bc-d31f-49b1-80e6-92c001a8d370", "value": "T1C3F34B13A8699F97C186AFB562E34AB50753EC154F470FAAB13AEAF40643DCDF8053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "36e0d882-87be-4994-b96a-663243b7a940", "value": "3072:ZWGLIxaWWT8g25oOG34Wlxf922yq8YuSmcQJ+qo2Qb2j4NPGBr:ZWGLIlE87uhlz22yqR/mcQJ+qo2Qb2jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630323, "uuid": "934e59fb-de69-4b5a-997f-20992dceabbc", "value": 162343, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "14983ce8-ece7-4cc6-88d4-9f926059b929", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e48bde06-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776630323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "1f85c212-00c2-4d4b-9dc6-08d511c1a2bf", "comment": "Malware payload (Mirai)", "value": "88a7ce6c45e67dc97301e5385c0f401e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "cd3057c5-05d7-4199-aebb-cdc1d22ee4bb", "comment": "Malware payload (Mirai)", "value": "82a6f04b023b3cb357074b674fceef4d5c38a2ef94e3c35ad3ea677a24c9a451", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "5281c803-74ee-4e33-b3a1-f27bb45152eb", "value": "T1BD140983B904DEF7F40EE77204D307257271BB650A531A32B21BB979AE3A2D47426F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "8dc6cbdd-a687-413c-8518-81ce9a1f0e90", "value": "6144:hXgLuyqS4dixVwSmTL37Azfxcsmc6C+Po2bC2/mNPJBj:hXgZV6Azfnmc6C+Po2bC2/mNPJBj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776630323, "uuid": "942ca200-69d4-438d-b2d2-1be2327b943f", "value": 202031, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630323, "uuid": "3fb15b6b-945a-45a2-b990-8f4cb39f74cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3856dae8-3c38-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776634758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634758, "uuid": "b38c05b5-ac5b-42f7-a51d-eddd4341fefa", "comment": "Malware payload (Mirai)", "value": "1b55863a98ec873227090e50a6746192", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634758, "uuid": "fdb70693-de94-4225-a2b7-74256ea1cf01", "comment": "Malware payload (Mirai)", "value": "3b5fed474c7ca7daf87d755878652eff49f3758e2787552346f48789ad6a6681", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634758, "uuid": "8e96e94d-a2fd-4710-ad71-592db6d0a270", "value": "T16A530210B26AC767E690CCB6E1968AC255120CFCDDB650907930DF4F06A73AF36B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634758, "uuid": "fd274053-4765-420c-b2e3-32d5624016a8", "value": "1536:AaBl+sX2qxqxAKMwsNjgu6vMtC6S46Dff0TLNtcv64rP:AHSqNZsmvMtC6XY4LLcv6UP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776634758, "uuid": "3bb4aa0f-270a-4b73-b39a-8be00e9bcc6a", "value": 61852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634758, "uuid": "08af76e6-a893-4908-b5c6-fac56c843711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776556817, "uuid": "bf8c43fc-3b82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynfluxar3.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776556928, "uuid": "01bf7287-3b83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.192.170:35563/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557172, "uuid": "93340ef1-3b83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deployreed.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557531, "uuid": "69851267-3b84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://portvelv.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557659, "uuid": "b592769f-3b84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.230.194:44279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557828, "uuid": "1a5a1d49-3b85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mediacata.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776557840, "uuid": "21a54333-3b85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.35.114:34819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558191, "uuid": "f3085fa0-3b85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2mbdmbjd.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558486, "uuid": "a2d3fb6a-3b86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipghcn.po6vtaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558849, "uuid": "7b1862a9-3b87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-spireos.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558857, "uuid": "7fa0972a-3b87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:56673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776558926, "uuid": "a91f30a7-3b87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.172.22.97:58945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559026, "uuid": "e4717a04-3b87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.35.106:44418/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559148, "uuid": "2d751f83-3b88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vialnoti.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559153, "uuid": "30074c78-3b88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.14.190:47741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559271, "uuid": "769eb10b-3b88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.217:33939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559337, "uuid": "9dcdb520-3b88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:35051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559508, "uuid": "03854521-3b89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pix32-logic.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559519, "uuid": "0a44e9f2-3b89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.35.114:34819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559579, "uuid": "2dffd881-3b89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.242.58:34765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559580, "uuid": "2ed1e5bf-3b89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.162.223.228:43443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559749, "uuid": "9350973d-3b89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dkkvkpl.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776559995, "uuid": "25ce3a13-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:56301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560019, "uuid": "347e5504-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.118.49:48095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560111, "uuid": "6b6bc422-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.0.193:51201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560168, "uuid": "8d40a91b-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:51263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560168, "uuid": "8d698525-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://modernsilver.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560241, "uuid": "b886b0e4-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:51263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560422, "uuid": "24b9c1e9-3b8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:56673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560470, "uuid": "41226efa-3b8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lveu.wi3msorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560830, "uuid": "17887645-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deli-soli.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776560961, "uuid": "65c58bf9-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.217:33939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561127, "uuid": "c910b160-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.171.45:52194/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561187, "uuid": "ec8a37cd-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cnjcb.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561383, "uuid": "613f3cee-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.118.49:48095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561487, "uuid": "9f7c64b7-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i2wigref.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561498, "uuid": "a5dfa5f2-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.15.56.127:53745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561559, "uuid": "ca14b879-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:56301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561560, "uuid": "ca9b1c9c-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:52777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561731, "uuid": "30b44739-3b8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.162.223.228:43443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561735, "uuid": "32e548f0-3b8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.241.153:47017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561857, "uuid": "7bbca46b-3b8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://az60udk.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776561914, "uuid": "9da83734-3b8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.85.212:40588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776562149, "uuid": "2a35bc3b-3b8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yabplkm.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776562329, "uuid": "954aaede-3b8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:60413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776562331, "uuid": "96335333-3b8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.253.178:44176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776562509, "uuid": "005b6fd3-3b90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stock-cir.bovlare7x.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776562869, "uuid": "d6f5a8dd-3b90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thxzt16c.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776562995, "uuid": "21f0b778-3b91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.173.87:40631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563228, "uuid": "ad196124-3b91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.57:60024/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563294, "uuid": "d427ed40-3b91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://adapterharvest.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563528, "uuid": "600f4b1a-3b92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-array.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563589, "uuid": "8447a311-3b92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.224.101:41959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563776, "uuid": "f3844e53-3b92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:60413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563888, "uuid": "366d2943-3b93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-h1dde.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563894, "uuid": "3a244cf4-3b93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.88.34:54653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776563896, "uuid": "3b0b5689-3b93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.36.76:49868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776564187, "uuid": "e8f4f261-3b93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arktide7en.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776564622, "uuid": "ebdec515-3b94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.130.225:34157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776564788, "uuid": "4ed64034-3b95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkdraa3.qi4morxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776564798, "uuid": "54d6fcd7-3b95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.242.15.158:34517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776564967, "uuid": "b9bae628-3b95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echo-slow.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776564985, "uuid": "c45de692-3b95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.155:39086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565042, "uuid": "e6328f83-3b95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.221.88:36078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565208, "uuid": "4935b571-3b96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://profitlat.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565396, "uuid": "b9753287-3b96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.136:38329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565460, "uuid": "df76b099-3b96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.137.179:52785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565509, "uuid": "fcb80131-3b96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ion-cas.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565574, "uuid": "2370e096-3b97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.138.221.70:54273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565810, "uuid": "b00233b7-3b97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ed171vt.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565872, "uuid": "d5400520-3b97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.130.225:34157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776565873, "uuid": "d58a36eb-3b97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.187:36133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776566468, "uuid": "380c8782-3b99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tallithar8.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776566536, "uuid": "60b41fe5-3b99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.206.75:35651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776566588, "uuid": "7f9417d3-3b99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://10987.7zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776566888, "uuid": "32dbe0ab-3b9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://online-study1.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776567080, "uuid": "a4e2bb15-3b9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.13.85:45414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776567248, "uuid": "0973e7e1-3b9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-student2.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776567259, "uuid": "0fe8e9f4-3b9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.138.221.70:54273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776567314, "uuid": "3081e871-3b9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.157.133:53803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776567552, "uuid": "be1ceb62-3b9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://final-lesson3.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776567847, "uuid": "6e0315aa-3b9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://class-report4.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568150, "uuid": "22828575-3b9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://book-reader5.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568401, "uuid": "b86bfa57-3b9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.109.167:57529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568458, "uuid": "da54c724-3b9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.89:57688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568525, "uuid": "028f12a7-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.158.237:45907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568569, "uuid": "1c9ec0dd-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grade-point6.6zoranel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568634, "uuid": "438725ae-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:36554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568819, "uuid": "b1742dd1-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.180:53843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776568870, "uuid": "d003a168-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-guide1.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776569226, "uuid": "a41c7484-3b9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotel-check2.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776569357, "uuid": "f24e8e05-3b9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.148.232.87:1473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776569416, "uuid": "1556a523-3ba0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.90.6:40569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776569587, "uuid": "7b0eee25-3ba0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-map3.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776569889, "uuid": "2f5b08e2-3ba1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beach-resort4.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570192, "uuid": "e3dfc3ee-3ba1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trip-advisor5.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570313, "uuid": "2c266509-3ba2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.180:53843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570378, "uuid": "530e5b5b-3ba2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:36554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570549, "uuid": "b8f48e02-3ba2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-event6.ra3xelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570616, "uuid": "e0b5e1a0-3ba2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.146.90:53177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570859, "uuid": "71430b60-3ba3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.148.232.87:1473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570860, "uuid": "71cc2d95-3ba3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.225.165:39470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776570910, "uuid": "8ff2b498-3ba3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-paper1.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571037, "uuid": "db9beda3-3ba3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.68:55242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571221, "uuid": "49488046-3ba4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.141.23:53658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571267, "uuid": "64b3ffe4-3ba4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pencil-case2.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571337, "uuid": "8e32ed3e-3ba4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.210.48:50249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571568, "uuid": "1851c8f0-3ba5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://black-marker3.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571879, "uuid": "d13c9d61-3ba5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.228.122:48596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776571929, "uuid": "ef69ca26-3ba5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-board4.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572048, "uuid": "361a1ec4-3ba6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.97.188:42557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572120, "uuid": "60d284d6-3ba6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.75.204:40567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572228, "uuid": "a193ea7c-3ba6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glue-stick5.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572487, "uuid": "3b935956-3ba7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.72.162:42300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572652, "uuid": "9e3fce62-3ba7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.245:43625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572777, "uuid": "e8e68198-3ba7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.141.23:53658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776572829, "uuid": "07d41751-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://desk-folder6.sylom7er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573015, "uuid": "76b6b7ba-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-service1.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573143, "uuid": "c3126bf6-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.53.122:46594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573314, "uuid": "28d925c2-3ba9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-house2.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573617, "uuid": "dd6d4c26-3ba9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://repair-work3.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573675, "uuid": "ffb9e20d-3ba9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.210.48:50249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776573973, "uuid": "b1d2373f-3baa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://garden-view4.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574163, "uuid": "2310fb96-3bab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.53.122:46594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574273, "uuid": "6474628c-3bab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://water-pipe5.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574334, "uuid": "88aef81c-3bab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.97.188:42557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574633, "uuid": "3afb963f-3bac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-door6.to8varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574704, "uuid": "6530b726-3bac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.185.153:47418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574753, "uuid": "8251c57d-3bac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.80.120:59275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574825, "uuid": "ad203af3-3bac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:60156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574826, "uuid": "ae3fe8b5-3bac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.47.201.7:52455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776574994, "uuid": "11e22151-3bad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-frame1.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575230, "uuid": "9f0e8aa9-3bad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.196:33642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575298, "uuid": "c74a874f-3bad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://image-zoom2.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575593, "uuid": "774c8801-3bae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://picture-book3.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575655, "uuid": "9c21e644-3bae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.196:33642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776575842, "uuid": "0b76cb2a-3baf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.185.153:47418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576017, "uuid": "73ba1f19-3baf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-clip4.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576025, "uuid": "7879fbbb-3baf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.122.75:44241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576253, "uuid": "0075bf2a-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.107.90:58845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576257, "uuid": "032975c8-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sound-track5.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6c91dc27-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.157.18.236:54022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6c927efd-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:60156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6ca75ff0-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6ca955c2-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6caa0ea0-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6caa2a70-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6caaa162-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6cade2c0-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6cb373a0-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576434, "uuid": "6cbf613a-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576435, "uuid": "6cdb0a02-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90b350c3-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90b9241d-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90b98173-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90bd3c01-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90bff83f-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90c1ad90-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90cced40-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90d2f75a-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576495, "uuid": "90d44f5e-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "95d4f44c-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "95d9105e-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576503, "uuid": "95dbf905-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576504, "uuid": "96606de7-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576510, "uuid": "99915d57-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576553, "uuid": "b322deec-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576553, "uuid": "b3245cfd-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576553, "uuid": "b336c5fa-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576553, "uuid": "b341aa23-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576567, "uuid": "bbd7704d-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576567, "uuid": "bbe09efa-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576569, "uuid": "bd19df8f-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576569, "uuid": "bd318dc2-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.193/hiddenbin/Space.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576570, "uuid": "bd406241-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576570, "uuid": "bd43b87f-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576570, "uuid": "bd43ecad-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576570, "uuid": "bd4ac5cb-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576570, "uuid": "bd4d9776-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576630, "uuid": "e18cc631-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576631, "uuid": "e1e2ae80-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576631, "uuid": "e1fb414d-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576672, "uuid": "fa49bc88-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media-player6.kymli4rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776576975, "uuid": "aecd8f8f-3bb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://car-rental1.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577275, "uuid": "6183eaaa-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-drive2.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577281, "uuid": "6588153b-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.151.99:45028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577328, "uuid": "81462536-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.162.141:50727/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577631, "uuid": "35cebe15-3bb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.78.158:37348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577693, "uuid": "5af5b845-3bb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://road-trip3.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776577935, "uuid": "eadd4317-3bb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auto-parts4.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578228, "uuid": "99add543-3bb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.50.200.133:52069/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578351, "uuid": "e2deba68-3bb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gas-station5.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578657, "uuid": "99bd7bea-3bb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-park6.po2vtalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776578955, "uuid": "4b353259-3bb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-ocean1.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776579078, "uuid": "94a5be70-3bb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.151.99:45028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776579137, "uuid": "b7cbf783-3bb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.100.97:35721/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776579309, "uuid": "1e4b01e4-3bb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-grass2.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776579789, "uuid": "3bf27ff2-3bb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-apple3.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776580029, "uuid": "cb48a087-3bb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:52777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776580031, "uuid": "cc744f0d-3bb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-star4.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776580156, "uuid": "1714167f-3bb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.46.18:44677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776580328, "uuid": "7d851485-3bb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.75.33:46969/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776580687, "uuid": "53a7d5d8-3bba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silver-coin5.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776580991, "uuid": "08ae334e-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-snow6.wi9msorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776581004, "uuid": "102baf11-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.74.93:58121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776581228, "uuid": "95e2774a-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.250.48:58215/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776581289, "uuid": "ba8d3094-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-news1.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776581711, "uuid": "b5d74d18-3bbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-press2.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776581959, "uuid": "498e3df3-3bbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.46.18:44677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582008, "uuid": "670a02ab-3bbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sport-match3.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582011, "uuid": "68a26724-3bbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.53:60502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582127, "uuid": "ad7e7eac-3bbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.93:40049/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582309, "uuid": "1a6d1bfe-3bbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weather-post4.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582727, "uuid": "13260418-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.250.48:58215/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582733, "uuid": "16afed8c-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-topic5.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582849, "uuid": "5bf356dd-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.31.185:33605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776582971, "uuid": "a4a9e607-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:53937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583031, "uuid": "c8b69ae8-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-stream6.de5xpiren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583151, "uuid": "100be7da-3bc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.53:60502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583283, "uuid": "5e834484-3bc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.253:58972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583327, "uuid": "78e7315f-3bc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.14.190:47741/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583329, "uuid": "7a488a92-3bc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-food1.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583688, "uuid": "50693cd5-3bc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-meal2.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776583990, "uuid": "044fe34e-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-dish3.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584228, "uuid": "91e901fc-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.220.126:39624/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584348, "uuid": "d9c7f24c-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-cake4.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584419, "uuid": "03c14d4e-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.8.152:39937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584476, "uuid": "25a28212-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:53937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584476, "uuid": "25abf6d7-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:55232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584648, "uuid": "8c943eda-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-juice5.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584826, "uuid": "f6c59127-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.68.198:35382/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584828, "uuid": "f7d0934f-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.200.102.72:52819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776584896, "uuid": "2030a132-3bc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.253:58972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585074, "uuid": "8a198943-3bc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-drink6.bovla8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585257, "uuid": "f7806baa-3bc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.140.72:56418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585372, "uuid": "3baa4cf5-3bc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-book1.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585556, "uuid": "a9e0ce55-3bc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.219.237:37545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585668, "uuid": "ec968e16-3bc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://read-more2.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585971, "uuid": "a1246f61-3bc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:55232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776585972, "uuid": "a197d41c-3bc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.58.161:47020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586090, "uuid": "e8013bfa-3bc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-number3.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586152, "uuid": "0ca0c249-3bc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.190.66:34947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586327, "uuid": "7533b413-3bc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-seller4.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586570, "uuid": "05b0332e-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.209.65:42222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586689, "uuid": "4c9fc60d-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-author5.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586930, "uuid": "dc9f1098-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.161/bins/pppc", "Tag": [ { "name": "185-132-53-161", "colour": "#e5672a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776586933, "uuid": "de97a392-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.96:52320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587051, "uuid": "2499b9cc-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-library6.qi1moxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587060, "uuid": "29e3746c-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.arm7", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587060, "uuid": "2a112ad8-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.mpsl", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587061, "uuid": "2aae09ba-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.mips", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587061, "uuid": "2ab169ea-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.sh4", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587061, "uuid": "2ab16ff2-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.arm5", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587061, "uuid": "2ab177e7-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.arm", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587061, "uuid": "2ab1816e-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.arm6", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587062, "uuid": "2b02be5a-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.m68k", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587119, "uuid": "4d312447-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.x86", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587179, "uuid": "7131415e-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.spc", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587180, "uuid": "71acab34-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.219.237:37545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587181, "uuid": "7267d9b6-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.47.223:45082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587237, "uuid": "93444d7d-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.194/dlr.ppc", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587409, "uuid": "fa47993d-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-design1.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587527, "uuid": "409729f3-3bca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.196:54532/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587711, "uuid": "adc8c659-3bca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://living-room2.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587778, "uuid": "d61ed753-3bca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.58.161:47020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587827, "uuid": "f2ed6d57-3bca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.140:35009/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776587890, "uuid": "18980e8a-3bcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.190.66:34947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588010, "uuid": "606c4ead-3bcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-decor3.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588256, "uuid": "f2cba3f2-3bcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.209.65:42222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588372, "uuid": "3807ef60-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.140.59:43971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588428, "uuid": "594fe51b-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-house4.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588671, "uuid": "ea46db1d-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.55:43722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588674, "uuid": "ebe58ad6-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.158.226:55588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588799, "uuid": "36b7a78b-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:52184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588969, "uuid": "9ba8cb7e-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-garden5.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588980, "uuid": "a24a751e-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.138.35:39589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776588981, "uuid": "a34b162d-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.180.153:42905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589026, "uuid": "be1928f7-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.196:54532/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589149, "uuid": "0726b0c7-3bce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-yard6.2zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589159, "uuid": "0d28de60-3bce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.47.223:45082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589452, "uuid": "bc08094d-3bce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-plan1.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589627, "uuid": "24014a63-3bcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.89.252.178:38731/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589749, "uuid": "6c911106-3bcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://modern-base2.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776589756, "uuid": "70d85bf3-3bcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.227.23:32919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590049, "uuid": "1febccd1-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-style3.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590178, "uuid": "6c73c72a-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.158.226:55588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590179, "uuid": "6cd76507-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.113.106:40495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590232, "uuid": "8cb36319-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.55:43722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590357, "uuid": "d7406e56-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.96:52320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590469, "uuid": "19bc76fb-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-street4.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590474, "uuid": "1d01c324-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.154:51903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590658, "uuid": "8aba8edd-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:52184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590725, "uuid": "b27a7572-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.180.153:42905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776590767, "uuid": "cbdb06a4-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-square5.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776591128, "uuid": "a2ab1b60-3bd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://night-view6.ra6xovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776591258, "uuid": "f0412d6d-3bd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.42.81:35116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776591315, "uuid": "122953f0-3bd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.192.47:42680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776591431, "uuid": "578839bd-3bd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://black-ink1.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776591790, "uuid": "2d67a7aa-3bd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-page2.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776591918, "uuid": "79b75462-3bd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.113.106:40495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592086, "uuid": "de02e497-3bd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-pen3.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592098, "uuid": "e4e60d34-3bd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.154:51903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592219, "uuid": "2cf5ed45-3bd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.146:57103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592450, "uuid": "b6a778df-3bd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-mark4.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592633, "uuid": "2407f719-3bd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.42.81:35116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592634, "uuid": "2486fc4c-3bd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.79.95:60773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776592815, "uuid": "908893c7-3bd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thick-file5.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776593349, "uuid": "ced466c9-3bd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-paper6.sylo9rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776593588, "uuid": "5d06f4ef-3bd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media-info1.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776593767, "uuid": "c7a9c7b1-3bd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-clip2.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594129, "uuid": "9f7b0cfa-3bd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sound-mix3.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594489, "uuid": "75eeabe4-3bda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-shot4.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594622, "uuid": "c55bcdec-3bda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.89.101.139:51023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776594734, "uuid": "07cfc8ce-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://film-edit5.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595055, "uuid": "c72359e6-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.79.95:60773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595149, "uuid": "ffa00eb7-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-feed6.to3vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595341, "uuid": "720a3d6c-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.89.101.139:51023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595450, "uuid": "b2e2c480-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-match1.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595463, "uuid": "bab225b1-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.170:43245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595463, "uuid": "bab89e2d-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.170:43245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595519, "uuid": "dc418a83-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.239.6:37573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595654, "uuid": "2cbfbcdc-3bdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.47.107:59022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776595873, "uuid": "aeeccc20-3bdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-score2.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596111, "uuid": "3cc21ce4-3bde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-medal3.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596415, "uuid": "f231bc03-3bde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-player4.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596709, "uuid": "a1314c5e-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.146.43:46420/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596709, "uuid": "a1517895-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/run.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596714, "uuid": "a40e132c-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tg-xxooxx888.8964.mom/loader.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596715, "uuid": "a51acdf6-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oblionts.com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/loc1", "Tag": [ { "name": " Dropper", "colour": "#a2e619", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596719, "uuid": "a745333d-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oblionts.com/4ba0af68-0037-5f6e-afd1-64f89fc0f554/v1", "Tag": [ { "name": " Dropper", "colour": "#a2e619", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596720, "uuid": "a7a68f46-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fd.v2downf.shop//tmp/f/10dfff942805d90d6ebb28bd58093653_20251208021850.so", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596743, "uuid": "b5a97d75-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://x.vodxz.icu/d/amoookde.x", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596836, "uuid": "ed10e8ad-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://final-game5.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776596857, "uuid": "f9b34dfa-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.62.95:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597077, "uuid": "7c607551-3be0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.239.6:37573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597134, "uuid": "9e70ba6b-3be0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sport-news6.kymli7ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597195, "uuid": "c3219436-3be0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.54.187:48002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597332, "uuid": "14871f11-3be1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.47.107:59022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597494, "uuid": "75224d18-3be1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-proxy1.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597814, "uuid": "33a8775c-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.95.184:43603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776597855, "uuid": "4c9ed8c3-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-node2.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598148, "uuid": "fb432da0-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "fb67ffa3-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "fb73c13e-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "fb7ca07c-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598149, "uuid": "fb7cb668-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598151, "uuid": "fc8bed8e-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "fd606c9e-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "fd702d8b-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "fd7c8fcb-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598152, "uuid": "fd7d15aa-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598154, "uuid": "fe55dd8d-3be2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-tunnel3.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598158, "uuid": "00e93248-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/scar", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598158, "uuid": "00ec5d1f-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598158, "uuid": "00ed244d-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "01fe13ee-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "01fe36ff-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "02023df8-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "020d6083-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598160, "uuid": "020da3a2-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598167, "uuid": "0631a6a7-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.21/scar", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598178, "uuid": "0cd3eedb-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598178, "uuid": "0cd512ce-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "0dd20bed-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "0dd21be9-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "0dd93b4b-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "0dda5ad4-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "0de9782c-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598180, "uuid": "0e1d3ade-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.34/bins/hoho.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598454, "uuid": "b1afe6b9-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-gate4.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598518, "uuid": "d78f411a-3be3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.108:50826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598646, "uuid": "239a3e57-3be4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.51.68:38320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598712, "uuid": "4b304079-3be4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.54.187:48002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776598816, "uuid": "896b5588-3be4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-auth5.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599009, "uuid": "fc46e5d1-3be4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.88.221:45987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599175, "uuid": "5f60e1cb-3be5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-void6.po8vtirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599537, "uuid": "370e82b7-3be6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocean-view1.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776599833, "uuid": "e79e49e0-3be6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sand-beach2.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600196, "uuid": "bf7194f4-3be7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://palm-tree3.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600429, "uuid": "4a6e3d84-3be8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.99.17:42926/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600554, "uuid": "94fa7e98-3be8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-wave4.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600626, "uuid": "c015d5f9-3be8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.51.68:38320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776600916, "uuid": "6cb3199d-3be9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://island-trip5.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601148, "uuid": "f76c294c-3be9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boat-tour6.wi1msaren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601162, "uuid": "ffb54c33-3be9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.108:50826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601571, "uuid": "f305e0cf-3bea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-info1.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601638, "uuid": "1b4fd5e0-3beb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.103.83:36096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601702, "uuid": "411137d4-3beb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.88.187:38196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776601811, "uuid": "820f8096-3beb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-map2.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776602235, "uuid": "7ef8e120-3bec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-link3.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776602487, "uuid": "157d8561-3bed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.109:59602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776602529, "uuid": "2e27b2b2-3bed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-list4.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776602530, "uuid": "2f2ba201-3bed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.231:39176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776602894, "uuid": "07b6c3e5-3bee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-base5.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603079, "uuid": "765bce8e-3bee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.103.83:36096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603128, "uuid": "933c5a0b-3bee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.78:51932/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603190, "uuid": "b8448af5-3bee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-node6.de4xpamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603429, "uuid": "468545f0-3bef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.125.47:48099/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603436, "uuid": "4b161a5c-3bef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.168.159:46902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603498, "uuid": "6fac9e3a-3bef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.30.244:57291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603548, "uuid": "8d8edc76-3bef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-chef1.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603563, "uuid": "966e5a77-3bef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.166:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603563, "uuid": "96ba6f36-3bef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.243.61:53157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776603849, "uuid": "411ab900-3bf0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pie2.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604026, "uuid": "aad271c2-3bf0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.95.252:49490/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604211, "uuid": "18a4703d-3bf1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-cake3.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604276, "uuid": "3fa58589-3bf1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.109:59602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604452, "uuid": "a89ecfc0-3bf1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.173.87:40631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604509, "uuid": "ca99fc33-3bf1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-grill4.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604690, "uuid": "36677bbd-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.243.61:53157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604760, "uuid": "60160a94-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.3.11.210:52981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604763, "uuid": "61f20a0a-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.53.82:54164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604929, "uuid": "c48385a0-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-milk5.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604998, "uuid": "ee308fef-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.232.57:56216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776604998, "uuid": "ee31da2c-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.232.57:56216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605062, "uuid": "1406da24-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.253:54165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605121, "uuid": "374290e1-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.64:34561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605121, "uuid": "375f032b-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.168.159:46902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605229, "uuid": "778c008b-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.142.2:38272/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605236, "uuid": "7b8e0f9a-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-bun6.bovla5ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605478, "uuid": "0c19538e-3bf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:34581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605527, "uuid": "294c523e-3bf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://book-shelf1.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605715, "uuid": "98fe43aa-3bf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:34581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776605948, "uuid": "240e1ec3-3bf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-box2.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606193, "uuid": "b600b884-3bf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-gift3.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606314, "uuid": "fe2f92ef-3bf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.53.82:54164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606493, "uuid": "68fb5ec5-3bf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.227.210:49002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606609, "uuid": "ae5a7227-3bf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://large-pack4.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606681, "uuid": "d9411382-3bf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.64:34561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606801, "uuid": "206cc1e6-3bf7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:35133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776606848, "uuid": "3c5372f7-3bf7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-load5.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776607221, "uuid": "1aab6b22-3bf8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.173.14:44279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776607274, "uuid": "3a65cafa-3bf8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-task6.qi9morlen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776607518, "uuid": "cc0ac294-3bf8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.78.57.64:45346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776607628, "uuid": "0dad4236-3bf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.218.80:40699/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776608227, "uuid": "7299beba-3bfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.219.78:43957/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776608660, "uuid": "748c8ab5-3bfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.74.106:42219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776608829, "uuid": "d954a2a8-3bfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.56.31:44224/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776608889, "uuid": "fd16a0ad-3bfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.52.12:52912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776609020, "uuid": "4b633161-3bfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.164.69.142:57439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776609319, "uuid": "fda503f3-3bfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.78.57.64:45346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776609428, "uuid": "3e776a5f-3bfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://traile1-wave.craftf1uctuate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776609911, "uuid": "5e338f2e-3bfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://golgath.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776609974, "uuid": "84093b72-3bfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.179:53192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610099, "uuid": "ce5a09d5-3bfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.166.228:48481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610219, "uuid": "1606daf4-3bff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.231:39176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610222, "uuid": "17985e4a-3bff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.74.106:42219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610271, "uuid": "350272b1-3bff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://g9jy.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610640, "uuid": "110c1f82-3c00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.60.64:55144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610810, "uuid": "76050a98-3c00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pipelinestudi.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610930, "uuid": "bdd58e5a-3c00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.218.80:40699/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610935, "uuid": "c095dbf0-3c00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.85:60753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776610990, "uuid": "e152b460-3c00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://63ev.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611293, "uuid": "95d9eadc-3c01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arnubx.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611297, "uuid": "987b506c-3c01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:46371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611413, "uuid": "dd5f2a13-3c01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.179:53192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611477, "uuid": "0387a497-3c02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.248.175.224:50396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611650, "uuid": "6b07a767-3c02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://posterharbor.dickina-exagger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611651, "uuid": "6b317eb6-3c02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:46371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611720, "uuid": "94a961df-3c02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.28.143:35701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776611890, "uuid": "f9ddf2d9-3c02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voltquarry.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612254, "uuid": "d2d6091e-3c03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ul9d3.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612427, "uuid": "39f93664-3c04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.231.108:58979/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612446, "uuid": "4525e0f1-3c04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.230.175:52561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612610, "uuid": "a6eb870e-3c04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://retailree.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612679, "uuid": "d042cb82-3c04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.157.109:55274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612731, "uuid": "ef0ecb49-3c04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.185.64:59180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776612968, "uuid": "7c50b13a-3c05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliffbala.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613036, "uuid": "a4e24949-3c05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.38.189:37942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613269, "uuid": "2fa9bbb5-3c06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://r31a6-gate.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613515, "uuid": "c243d09a-3c06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.28.143:35701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613627, "uuid": "055ede0c-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.151.187:36476/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613628, "uuid": "060b1de0-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.253.184:58047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613631, "uuid": "07622436-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pcllgu4.hearkenw2tman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613807, "uuid": "70893ece-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/sora.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613815, "uuid": "753e5a8c-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zoommeetingg.click/zoom/Windows/files/17UATCXCBHL34_19SI0B7FBSUF4_windows_x64.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613872, "uuid": "9762cb13-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:59262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613882, "uuid": "9d0074fa-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613882, "uuid": "9d3e229e-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613882, "uuid": "9d5086cc-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613882, "uuid": "9d67e1dc-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613883, "uuid": "9d995ac2-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:59262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613883, "uuid": "9da45ad3-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613883, "uuid": "9db4c75c-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613883, "uuid": "9dcff785-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613883, "uuid": "9de10099-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613883, "uuid": "9df3df5b-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613896, "uuid": "a5449893-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613896, "uuid": "a5546723-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613896, "uuid": "a566f873-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613896, "uuid": "a5826d46-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.178/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776613927, "uuid": "b7cf0048-3c07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-5tudio.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614118, "uuid": "29f96c1c-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.185.64:59180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614119, "uuid": "2a7e20dd-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.200.68:60882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614180, "uuid": "4ecb85d1-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.17.198:39350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614180, "uuid": "4ed5eb2c-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.85.212:40588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614226, "uuid": "6a15e1c1-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.157.109:55274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614289, "uuid": "8ff0231e-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://umxburt3.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614412, "uuid": "d8ed2c75-3c08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.72.17:38728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614528, "uuid": "1dff4f35-3c09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:57300/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614528, "uuid": "1dff5098-3c09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:57300/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614589, "uuid": "42791ee3-3c09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echamb.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614828, "uuid": "d12ae3df-3c09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.151.187:36476/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776614948, "uuid": "185a7edb-3c0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://efiarz.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776615312, "uuid": "f1926fc7-3c0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stre4m-well.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776615430, "uuid": "37cb2ceb-3c0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.166.228:48481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776615610, "uuid": "a3495881-3c0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pvc1l.merit-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776615621, "uuid": "a9cf3043-3c0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.222.186:41123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776615974, "uuid": "7bf7bf26-3c0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nor-tideet.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616034, "uuid": "9fa951f1-3c0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.213.141:60768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616034, "uuid": "9fad6fb1-3c0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.38.189:37942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616107, "uuid": "cb422a21-3c0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.57:60024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616159, "uuid": "ea2197c1-3c0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.157.133:53803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616333, "uuid": "52534fc1-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oz557xfr.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616524, "uuid": "c42a2c26-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.72.17:38728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616578, "uuid": "e43cc9db-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.199.109:59490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776616633, "uuid": "04ce8b7c-3c0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hsipz.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776617234, "uuid": "6adb1c66-3c0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://8rv3pcd.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776617471, "uuid": "f8749c32-3c0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snqw.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776617653, "uuid": "64dc83a0-3c10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumtideen9.cabmic7on.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776617800, "uuid": "bcbf29c4-3c10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.137.219:37722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776617949, "uuid": "150742b3-3c11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spec4-craft.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618015, "uuid": "3c8ac809-3c11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.62.233:53522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618017, "uuid": "3de7c0c7-3c11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.105.106:38727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618207, "uuid": "af643a06-3c11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.133.139:41679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618314, "uuid": "ef2c87c8-3c11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soumea.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618671, "uuid": "c3bb5873-3c12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdkmodu.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618864, "uuid": "3698e4e8-3c13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:42916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776618985, "uuid": "7ea511bb-3c13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.113.199:58824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619028, "uuid": "989641f7-3c13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0x-span.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619334, "uuid": "4ea5ade9-3c14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumnex2ar.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619659, "uuid": "10cd3fe0-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.116.68:54233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619670, "uuid": "16debd76-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.36.203.34:59572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619678, "uuid": "1bd9ad09-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.111:49268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619693, "uuid": "24c10bf1-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cavhn.effect-razina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619826, "uuid": "744b1ae4-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.129.180:44722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776619993, "uuid": "d7e9f310-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t3st-plate.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620060, "uuid": "ff860324-3c15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:42916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620119, "uuid": "2308a27b-3c16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:37709/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620290, "uuid": "888b1e97-3c16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5jhxktfe.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620669, "uuid": "6a51b547-3c17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.113.199:58824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620669, "uuid": "6a5eba4d-3c17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.111:49268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620778, "uuid": "ab4b4714-3c17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.187:36133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776620953, "uuid": "140fa7d2-3c18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moleculeblend.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621130, "uuid": "7d39a177-3c18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kxqj.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621196, "uuid": "a4948d63-3c18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.55.152:60983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621339, "uuid": "f9a4454e-3c18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.29.232:37093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621428, "uuid": "2f3aa0ea-3c19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickque.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621667, "uuid": "bd73499b-3c19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://triggerunload.jordan5nual.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621727, "uuid": "e1034a5f-3c19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:49137/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776621861, "uuid": "30fd1dfb-3c1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.116.68:54233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622029, "uuid": "95636699-3c1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ph0ton0-crest.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622389, "uuid": "6c0f9ba3-3c1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rzdwkgtc.chernichco5t.digital/?ublib=WUZlbCTAjNOluybN", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622391, "uuid": "6d3a295f-3c1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://050oanp8.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622748, "uuid": "41807091-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6jny.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622762, "uuid": "4a4051bf-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.127.174:48581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622764, "uuid": "4b02c3db-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.16.164.32:34133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622866, "uuid": "87ecc1d3-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.29.232:37093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776622999, "uuid": "d736eacd-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.136:36286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776623050, "uuid": "f5bb1f54-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshlin.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776623166, "uuid": "3b0ca115-3c1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/np.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Neutrino", "colour": "#a1fb00", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776623411, "uuid": "ccd05b58-3c1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coucinema.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776623768, "uuid": "a17eb0a8-3c1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sernex2en.animate-worn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624068, "uuid": "54b960f3-3c1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slu780t.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624367, "uuid": "06e2cdf6-3c20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://118jq.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624381, "uuid": "0f6324fc-3c20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.176:58392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624438, "uuid": "3135edb9-3c20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.34.154:49758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624438, "uuid": "313a24c7-3c20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.136:36286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624614, "uuid": "9a353174-3c20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.99.168:53911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624728, "uuid": "de1c0b10-3c20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spruce-field.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624797, "uuid": "06db1bd1-3c21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.16.164.32:34133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624921, "uuid": "513320df-3c21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.250.244:45842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776624976, "uuid": "71a3b404-3c21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.174:38508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625037, "uuid": "96457a1b-3c21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.34.154:49758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625038, "uuid": "969df2d1-3c21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.78:51932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625088, "uuid": "b44dc533-3c21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://builrai.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625449, "uuid": "8be507b0-3c22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rur4-watch.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625748, "uuid": "3df1c8c4-3c23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spatra.desa1inatcount.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625927, "uuid": "a869b26c-3c23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.73.11:44902/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776625987, "uuid": "cc8466bd-3c23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.176:58392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626109, "uuid": "15147ad5-3c24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://casca-frame.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626227, "uuid": "5b6d4418-3c24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.128.183:43524/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626234, "uuid": "5fc51d27-3c24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.84.73:36056/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626410, "uuid": "c876837d-3c24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p0rt-hold.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626712, "uuid": "7c9fa15c-3c25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xazhg.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626724, "uuid": "83993463-3c25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.231.137:46938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626782, "uuid": "a5ff6fc1-3c25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:57505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626826, "uuid": "c0874466-3c25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.128.183:43524/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776626899, "uuid": "ebbd4aeb-3c25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.174:38508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776627128, "uuid": "7457c276-3c26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nvxlifpf.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776627374, "uuid": "07244b40-3c27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://formatcon.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776627426, "uuid": "26359568-3c27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.73.11:44902/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776627726, "uuid": "d8dd1823-3c27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lpke7.heaton-stolid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776628089, "uuid": "b10c9560-3c28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-forest1.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776628451, "uuid": "88c82124-3c29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-river2.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776628699, "uuid": "1cc4013b-3c2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.12.132:33929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776628751, "uuid": "3c181226-3c2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-mount3.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776628757, "uuid": "3f593190-3c2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:60065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776628757, "uuid": "3f792bc0-3c2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.162.141:50727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776629108, "uuid": "10978d0a-3c2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-cave4.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776629470, "uuid": "e820bdc3-3c2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-field5.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776629530, "uuid": "0c11f19f-3c2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.124:56199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776629834, "uuid": "c11ca933-3c2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-lake6.lucernemo7al.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776629839, "uuid": "c409485d-3c2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:58709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776629960, "uuid": "0c3f3551-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.179.52:59362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630041, "uuid": "3cc5aff8-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.34:57249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630069, "uuid": "4d7b84cf-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-truck1.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630144, "uuid": "79f2d89e-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.88.187:38196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4ac16eb-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4acdb1a-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/penis.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4b24277-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4b5770f-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4b8dfb1-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4c6459c-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4cc8939-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630323, "uuid": "e4ce8a35-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.armv4l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630378, "uuid": "055ac344-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.34.205:38848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630432, "uuid": "25c64f11-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-cargo2.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630550, "uuid": "6bfc5f34-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.233:46590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630790, "uuid": "fb286432-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-store3.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776630791, "uuid": "fbc18a8f-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.245.228:33605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631026, "uuid": "87ceb534-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.x86_64", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631026, "uuid": "87ceb9c3-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.powerpc-440fp", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631026, "uuid": "87d07506-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.arc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631026, "uuid": "87d1363d-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.armv7l", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631026, "uuid": "87d81046-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.50.124.45/bins/mynode.armv6l", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631147, "uuid": "cfffd386-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-ship4.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631278, "uuid": "1de957a6-3c30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.124:56199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631400, "uuid": "66b61690-3c30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.50:60361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631449, "uuid": "84394129-3c30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://air-flight5.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631520, "uuid": "ae727e2c-3c30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.108.110:60944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631700, "uuid": "1973745d-3c31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:58709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776631808, "uuid": "59b4fd56-3c31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://large-box6.elephant-harv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632115, "uuid": "10b854ef-3c32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://art-studio1.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632290, "uuid": "79753929-3c32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.34.205:38848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632410, "uuid": "c0760f09-3c32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://color-paint2.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632712, "uuid": "74b4fae3-3c33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.30.17:44165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632827, "uuid": "b9382b94-3c33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.120.154:52636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632827, "uuid": "b9655aff-3c33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.50.200.133:52069/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632827, "uuid": "b9785306-3c33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://music-band3.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776632957, "uuid": "06802baf-3c34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.68.75:36874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633078, "uuid": "4f2f1a6e-3c34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.23:38831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633080, "uuid": "4fe4529b-3c34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.50:60361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633139, "uuid": "73222c07-3c34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.14.226:50437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633187, "uuid": "8ffcfbdc-3c34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dance-floor4.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633427, "uuid": "1eefd417-3c35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.157.39:33156/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633487, "uuid": "42caae0e-3c35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-shot5.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633851, "uuid": "1bee2341-3c36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://live-show6.tippyv0lup.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633920, "uuid": "450a2962-3c36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.11.39:44336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776633979, "uuid": "67d0dbfd-3c36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.178.233:46590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634089, "uuid": "a95bb0d9-3c36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-portal1.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634333, "uuid": "3b13eb6c-3c37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.23:38831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634510, "uuid": "a47f9b2c-3c37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-node2.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634512, "uuid": "a5c8dd7d-3c37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.68.75:36874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634758, "uuid": "38811783-3c38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/parm7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776634869, "uuid": "7a395287-3c38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-server3.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776635169, "uuid": "2d2fc4c3-3c39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-base4.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776635469, "uuid": "e0030003-3c39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-cloud5.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776635720, "uuid": "759154b0-3c3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.89.252.178:38731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776635900, "uuid": "e0d8b053-3c3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:60280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776635949, "uuid": "fe57325b-3c3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-frame6.laryngol-needle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776636312, "uuid": "d68f0d8c-3c3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-task1.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776636487, "uuid": "3ee8ae5d-3c3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-job2.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776636852, "uuid": "1821872a-3c3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-work3.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776636862, "uuid": "1e18d7f7-3c3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:46182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776637150, "uuid": "ca03a3d9-3c3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-plan4.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776637269, "uuid": "10c60d81-3c3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.44.179:42645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776637508, "uuid": "9f232b20-3c3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-time5.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776637872, "uuid": "786aa793-3c3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-goal6.ashes5upervise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776638228, "uuid": "4cd075c2-3c40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.174.100:55537/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776638234, "uuid": "5056dc66-3c40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-blog1.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776638474, "uuid": "def42bc6-3c40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-tour2.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776638482, "uuid": "e3bcb781-3c40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:46182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776638669, "uuid": "53a4edea-3c41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.253.240:34631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776638892, "uuid": "d89ca2a1-3c41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotel-stay3.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639136, "uuid": "69ca2a06-3c42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.96.110:59121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639192, "uuid": "8b2e4c5c-3c42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beach-view4.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639204, "uuid": "9283dcb5-3c42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.171.38:52706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639259, "uuid": "b2f4edca-3c42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.69.253:54165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639446, "uuid": "22b1e5cc-3c43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.0.32:36389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639553, "uuid": "6235b399-3c43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-trip5.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776639854, "uuid": "15939784-3c44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-walk6.there-way.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776640213, "uuid": "eba89b36-3c44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop-list1.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776640222, "uuid": "f0e29b72-3c44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.253.240:34631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776640575, "uuid": "c3338a2b-3c45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-price2.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776640875, "uuid": "7662f958-3c46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-sale3.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776640993, "uuid": "bccc82bb-3c46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.89.80:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641228, "uuid": "48b1f594-3c47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.209.213:45371/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641421, "uuid": "bb8e32f4-3c47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.126.55:35736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641471, "uuid": "d95b2cd8-3c47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-item4.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641483, "uuid": "e0c722be-3c47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.96.110:59121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641483, "uuid": "e0ce018e-3c47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.153.253:58816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641484, "uuid": "e1255d7d-3c47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.197.177:56830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641648, "uuid": "42d0d12f-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-buy5.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641909, "uuid": "dee17fa1-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.227.163.32:42392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641951, "uuid": "f79b37df-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-deal6.albann0vosel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641956, "uuid": "fad50032-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641956, "uuid": "fad6a518-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641956, "uuid": "fadf7d2a-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641956, "uuid": "fae04f8c-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641956, "uuid": "fae6ae43-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641957, "uuid": "fae9cf23-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641957, "uuid": "faee2ca4-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641965, "uuid": "fff87a5b-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641965, "uuid": "fffacedd-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641965, "uuid": "fffad378-3c48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776641965, "uuid": "00252622-3c49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776642322, "uuid": "d4cbf60f-3c49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:60065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776642368, "uuid": "f02373e8-3c49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-chef1.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776642619, "uuid": "85ed1537-3c4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.220.126:39624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776642669, "uuid": "a3717d10-3c4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-meal2.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776642967, "uuid": "54fd8f99-3c4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-food3.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643027, "uuid": "7921f2e9-3c4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.133.85:44081/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643029, "uuid": "79f9bb7c-3c4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.129.180:44722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643029, "uuid": "7a3c7575-3c4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.171.38:52706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622386, "uuid": "69d70e3e-3c1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "050oanp8.animate-worn.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619643, "uuid": "0725fb60-3c15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.116.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559144, "uuid": "2af27277-3b88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.14.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776586145, "uuid": "089d7f62-3bc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.190.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561725, "uuid": "2d114aa1-3b8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.241.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776565446, "uuid": "d6e53034-3b96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.137.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776607626, "uuid": "0c331899-3bf9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.218.80", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776566585, "uuid": "7dc9cce4-3b99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "10987.7zorelin.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776583265, "uuid": "541d1ea7-3bc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.239.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776609006, "uuid": "4306c95e-3bfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.164.69.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776563884, "uuid": "3447bb5a-3b93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.220.36.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776617765, "uuid": "a79ffae7-3c10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.137.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619643, "uuid": "0725ff9f-3c15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.113.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559985, "uuid": "204b7f10-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.251.118.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776614106, "uuid": "229400c2-3c08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.200.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577624, "uuid": "31e41ddf-3bb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.78.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776608885, "uuid": "fac1aa6e-3bfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.52.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590164, "uuid": "6455b813-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.233.113.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776633125, "uuid": "6b1ac8d9-3c34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.14.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618967, "uuid": "744005b5-3c13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.113.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776629525, "uuid": "094ebd77-3c2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.4.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612725, "uuid": "eb529ba3-3c04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.185.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776580145, "uuid": "10569730-3bb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.46.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776572044, "uuid": "33ed8b3c-3ba6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.97.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776633908, "uuid": "3d657189-3c36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.11.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776638225, "uuid": "4afff9de-3c40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.174.100", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618007, "uuid": "37e4893f-3c11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.62.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776624907, "uuid": "485f7be2-3c21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.250.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776632824, "uuid": "b7bf1b83-3c33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.120.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776586563, "uuid": "0209fe28-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.209.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776639126, "uuid": "63959f2e-3c42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.96.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612425, "uuid": "38901436-3c04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.230.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776604745, "uuid": "570fa393-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.53.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595626, "uuid": "1bb4e303-3bdd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.47.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582845, "uuid": "599e9a41-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.31.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588965, "uuid": "997ea025-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.138.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776624365, "uuid": "055dea9f-3c20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118jq.desa1inatcount.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621185, "uuid": "9e040543-3c18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.55.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596826, "uuid": "e71c772a-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.62.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776580325, "uuid": "7ba8567c-3bb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.162.75.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776564607, "uuid": "e2f2b6e0-3b94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.183.130.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598505, "uuid": "d0140171-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.243.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619643, "uuid": "0725c216-3c15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.36.203.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776565565, "uuid": "1df2f2d0-3b97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.138.221.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596708, "uuid": "a0790b4e-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.146.43", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557825, "uuid": "187641c2-3b85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.35.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776586926, "uuid": "da218759-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.73.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776641466, "uuid": "d65e351a-3c47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.153.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588366, "uuid": "3476eb66-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.140.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776585966, "uuid": "9db7ee37-3bc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.134.58.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600426, "uuid": "48e43f81-3be8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.99.17", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621307, "uuid": "e6be47f4-3c18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.29.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612665, "uuid": "c7d8124f-3c04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.157.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776584225, "uuid": "904c1404-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.220.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776602465, "uuid": "0832e369-3bed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.101.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613625, "uuid": "03eba732-3c07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.151.187", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776571207, "uuid": "40cf9496-3ba4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.141.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590465, "uuid": "17e03669-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.168.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776609965, "uuid": "7e774c18-3bfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.224.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603426, "uuid": "44eaff49-3bef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.125.47", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776604745, "uuid": "570f92ba-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.3.11.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776564784, "uuid": "4cc9eeaa-3b95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.242.15.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776611464, "uuid": "fc1f5e01-3c01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.248.175.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776626225, "uuid": "5a21ea4d-3c24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.84.73", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597784, "uuid": "2253b6b9-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.95.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776569406, "uuid": "0fb2c343-3ba0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.90.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588666, "uuid": "e70f217d-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.158.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776616566, "uuid": "dd3cfcb6-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.199.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776641946, "uuid": "f4aa70a9-3c48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.134.30", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634744, "uuid": "302c3fba-3c38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576486, "uuid": "8b56e464-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.193", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776607505, "uuid": "c45c8c79-3bf8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.78.57.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776641225, "uuid": "46e9ff5b-3c47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.209.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776565865, "uuid": "d11d2a51-3b97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.29.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776624606, "uuid": "950c0263-3c20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.99.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776581225, "uuid": "9436bce3-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.250.48", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622745, "uuid": "401b216e-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.127.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776610084, "uuid": "c5b5dec2-3bfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.166.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776605046, "uuid": "0a63ce28-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.69.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561125, "uuid": "c77de378-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.171.45", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568383, "uuid": "ade3206d-3b9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.109.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613025, "uuid": "9e5daed3-3c05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.38.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630307, "uuid": "db5a94f7-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.50.124.45", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588965, "uuid": "997e1d6c-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.10.180.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630006, "uuid": "27fb9a88-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622745, "uuid": "401abaa4-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.16.164.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776608826, "uuid": "d7a420cf-3bfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.56.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776640986, "uuid": "b835862d-3c46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.89.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776629945, "uuid": "0338b76f-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.179.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577325, "uuid": "7fc20967-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.162.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776592625, "uuid": "1f167921-3bd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.79.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776614407, "uuid": "d5d66b3c-3c08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.72.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561484, "uuid": "9dd672ea-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.15.56.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776584825, "uuid": "f5aecf24-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.200.102.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776604986, "uuid": "e6f0448d-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.232.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603545, "uuid": "8bc285bd-3bef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.243.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776558188, "uuid": "f10e5f2e-3b85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2mbdmbjd.po6vtaren.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776569344, "uuid": "eaa32099-3b9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.148.232.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776591306, "uuid": "0c9cc366-3bd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.192.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598626, "uuid": "17a5bb87-3be4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.51.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776587166, "uuid": "6901fcc7-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.47.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577266, "uuid": "5c223965-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.151.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776585544, "uuid": "a2b8e0c2-3bc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.219.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619807, "uuid": "68fe3b80-3c15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.129.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776611707, "uuid": "8d1852ac-3c02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.28.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612425, "uuid": "38901b8b-3c04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.231.108", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776584406, "uuid": "fbd9fe7d-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.8.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776579126, "uuid": "b13e8f0c-3bb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.100.97", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630544, "uuid": "68ce8380-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.178.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568805, "uuid": "a97cf490-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.67.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776615606, "uuid": "a0fc40a1-3c0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.222.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776591245, "uuid": "e8872525-3bd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.42.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776571865, "uuid": "c8f08095-3ba5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.228.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595507, "uuid": "d4bf36a8-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.239.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776585246, "uuid": "f0d55803-3bc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.140.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573125, "uuid": "b810ef9d-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.53.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618007, "uuid": "37e4522a-3c11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.105.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776608647, "uuid": "6ceb5eb2-3bfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.74.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776632945, "uuid": "ff717839-3c33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.68.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776628685, "uuid": "145332e2-3c2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.12.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776607207, "uuid": "12671c23-3bf8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.173.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776562325, "uuid": "92c5d3f4-3b8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.253.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603426, "uuid": "44eafad5-3bef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.168.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574685, "uuid": "59f00147-3bac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.185.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576546, "uuid": "aefc3c1c-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.194", "Tag": [ { "name": "45-156-87-194", "colour": "#35392f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594606, "uuid": "bb9256ef-3bda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.89.101.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578225, "uuid": "982b49c6-3bb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.50.200.133", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776610624, "uuid": "07927d26-3c00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.60.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603545, "uuid": "8bc25d6e-3bef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.88.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630786, "uuid": "f896de64-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.245.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776633064, "uuid": "46620a7b-3c34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776624365, "uuid": "0551abd9-3c20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.252.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776620287, "uuid": "8722f72c-3c16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5jhxktfe.jordan5nual.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776625924, "uuid": "a6cba837-3c23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.73.11", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776639425, "uuid": "161202dd-3c43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.0.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643025, "uuid": "779a21f9-3c4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.133.85", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776572106, "uuid": "58ca9c6e-3ba6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.75.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598985, "uuid": "edb3c623-3be4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.88.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601626, "uuid": "13d561dd-3beb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.103.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776610985, "uuid": "deb1bc54-3c00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "63ev.dickina-exagger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622745, "uuid": "4021c009-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6jny.animate-worn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776617231, "uuid": "6949b33c-3c0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8rv3pcd.cabmic7on.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776563225, "uuid": "ab6e0d0a-3b91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "adapterharvest.qi4morxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776631446, "uuid": "81e904eb-3c30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "air-flight5.elephant-harv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613924, "uuid": "b657118f-3c07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-5tudio.merit-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776564785, "uuid": "4ccfef1d-3b95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkdraa3.qi4morxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776564185, "uuid": "e7a44b7f-3b93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arktide7en.qi4morxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776611286, "uuid": "92067db3-3c01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arnubx.dickina-exagger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776632108, "uuid": "0ca9b44b-3c32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "art-studio1.tippyv0lup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577931, "uuid": "e8f65a8d-3bb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auto-parts4.po2vtalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561851, "uuid": "788a6843-3b8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "az60udk.bovlare7x.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776569886, "uuid": "2dc7112f-3ba1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beach-resort4.ra3xelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776639190, "uuid": "89ecee0a-3c42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beach-view4.there-way.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776637147, "uuid": "c85c9e46-3c3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-plan4.ashes5upervise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596411, "uuid": "eff28075-3bde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-player4.kymli7ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776640571, "uuid": "c1381087-3c45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-price2.albann0vosel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776586325, "uuid": "73fd6717-3bc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-seller4.qi1moxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776591428, "uuid": "55a4d093-3bd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "black-ink1.sylo9rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776571566, "uuid": "1710c965-3ba5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "black-marker3.sylom7er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776629827, "uuid": "bd46ad35-3c2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-lake6.lucernemo7al.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578947, "uuid": "463f9727-3bb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-ocean1.wi9msorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776592084, "uuid": "dcdfd00c-3bd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-pen3.sylo9rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600546, "uuid": "9092df75-3be8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-wave4.wi1msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601146, "uuid": "f5b26017-3be9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boat-tour6.wi1msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568145, "uuid": "1fa88278-3b9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "book-reader5.6zoranel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776605525, "uuid": "281e11e8-3bf4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "book-shelf1.qi9morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776625084, "uuid": "b25df5fa-3c21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "builrai.desa1inatcount.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576971, "uuid": "acbf2987-3bb1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "car-rental1.po2vtalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776626106, "uuid": "134d742d-3c24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "casca-frame.heaton-stolid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619690, "uuid": "22f30a0f-3c15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cavhn.effect-razina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578647, "uuid": "939c2d53-3bb5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-park6.po2vtalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776589444, "uuid": "b72e4231-3bce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-plan1.ra6xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776639850, "uuid": "1335599c-3c44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-walk6.there-way.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776567845, "uuid": "6ccc7138-3b9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "class-report4.6zoranel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573311, "uuid": "272f6a86-3ba9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-house2.to8varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776637870, "uuid": "773ab7c8-3c3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-goal6.ashes5upervise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612964, "uuid": "7a4e87be-3c05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliffbala.hearkenw2tman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598451, "uuid": "af796300-3be3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-gate4.po8vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603188, "uuid": "b706ff03-3bee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-node6.de4xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561185, "uuid": "eb5eba45-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cnjcb.bovlare7x.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776632407, "uuid": "bf005e5c-3c32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "color-paint2.tippyv0lup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776585067, "uuid": "861567a5-3bc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-drink6.bovla8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776604925, "uuid": "c25f4fe9-3bf2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-milk5.bovla5ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623406, "uuid": "ca2f2e7c-3c1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coucinema.animate-worn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776581285, "uuid": "b80b6be6-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-news1.de5xpiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776636307, "uuid": "d37b1d28-3c3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-task1.ashes5upervise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776633185, "uuid": "8e978446-3c34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dance-floor4.tippyv0lup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776635165, "uuid": "2add572f-3c39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-base4.laryngol-needle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776602892, "uuid": "065a8931-3bee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-base5.de4xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597492, "uuid": "73ebe18e-3be1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-proxy1.po8vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776629106, "uuid": "0f476f0b-3c2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-cave4.lucernemo7al.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776560825, "uuid": "14904055-3b8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deli-soli.bovlare7x.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557169, "uuid": "91e68c0f-3b83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deployreed.po6vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776572826, "uuid": "061dc305-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "desk-folder6.sylom7er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559745, "uuid": "910d2595-3b89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dkkvkpl.wi3msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776556809, "uuid": "bac2b8bf-3b82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynfluxar3.po6vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776614585, "uuid": "40677d56-3c09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echamb.merit-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776564965, "uuid": "b859f7f0-3b95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echo-slow.7zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776565806, "uuid": "adccebfb-3b97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ed171vt.7zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776614946, "uuid": "171db0c3-3c0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "efiarz.merit-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619026, "uuid": "97034d75-3c13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0x-span.effect-razina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776641645, "uuid": "413388d0-3c48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-buy5.albann0vosel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630427, "uuid": "22b4da9f-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-cargo2.elephant-harv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776635467, "uuid": "deddbc9e-3c39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-cloud5.laryngol-needle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577271, "uuid": "5f5f9d00-3bb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-drive2.po2vtalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776583325, "uuid": "7804b646-3bc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-food1.bovla8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595447, "uuid": "b12b4a95-3bdc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-match1.kymli7ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596713, "uuid": "a3be8c52-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fd.v2downf.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776602525, "uuid": "2c20986e-3bed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-list4.de4xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594731, "uuid": "06267c66-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "film-edit5.to3vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596832, "uuid": "ea5a8f59-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "final-game5.kymli7ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776567544, "uuid": "b9e47799-3b9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "final-lesson3.6zoranel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776627368, "uuid": "03509523-3c27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "formatcon.heaton-stolid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776605229, "uuid": "77a761f0-3bf3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-bun6.bovla5ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776642965, "uuid": "53c78908-3c4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-food3.apoth-shopping.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776584645, "uuid": "8aa5f30b-3bc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-juice5.bovla8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623047, "uuid": "f3f23c4a-3c1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshlin.animate-worn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776610265, "uuid": "315fc0b6-3bff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "g9jy.dickina-exagger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573970, "uuid": "af9b3518-3baa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "garden-view4.to8varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776578348, "uuid": "e173464b-3bb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gas-station5.po2vtalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776631145, "uuid": "ce9dce9d-3c2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-ship4.elephant-harv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776572226, "uuid": "a049fee6-3ba6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glue-stick5.sylom7er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596109, "uuid": "3b705f0c-3bde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-medal3.kymli7ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776580028, "uuid": "cacb9acb-3bb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-star4.wi9msorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776609907, "uuid": "5c15aedb-3bfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "golgath.dickina-exagger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776583684, "uuid": "4dfcb7fc-3bc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-meal2.bovla8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776640871, "uuid": "73dbfb00-3c46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-sale3.albann0vosel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568567, "uuid": "1b28ddaa-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grade-point6.6zoranel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776628085, "uuid": "af22a8f1-3c28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-forest1.lucernemo7al.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776579307, "uuid": "1d147613-3bb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-grass2.wi9msorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776589147, "uuid": "05e99fa4-3bce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-yard6.2zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776606845, "uuid": "3af02e7b-3bf7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-load5.qi9morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630065, "uuid": "4b31e22a-3c2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-truck1.elephant-harv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776628746, "uuid": "389fa22e-3c2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-mount3.lucernemo7al.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776642366, "uuid": "eedd7f2d-3c49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-chef1.apoth-shopping.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603545, "uuid": "8be460a9-3bef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-chef1.bovla5ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776587407, "uuid": "f8bfd1b4-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-design1.2zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573012, "uuid": "748bf50f-3ba8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-service1.to8varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776604507, "uuid": "c93c950d-3bf1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-grill4.bovla5ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582727, "uuid": "1372b2b5-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-topic5.de5xpiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776569223, "uuid": "a277a406-3b9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotel-check2.ra3xelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776638890, "uuid": "d74167c6-3c41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotel-stay3.there-way.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776616572, "uuid": "e07f46a3-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hsipz.cabmic7on.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776563885, "uuid": "3466c4d5-3b93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-h1dde.qi4morxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776561485, "uuid": "9ddbcb7f-3b8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "i2wigref.bovlare7x.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575291, "uuid": "c336bbaf-3bad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "image-zoom2.kymli4rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776565506, "uuid": "faf20d28-3b96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ion-cas.7zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776558484, "uuid": "a19c4ca8-3b86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipghcn.po6vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600912, "uuid": "6aaeb4f2-3be9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "island-trip5.wi1msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621127, "uuid": "7bd21ffe-3c18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kxqj.jordan5nual.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776631805, "uuid": "582a992e-3c31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "large-box6.elephant-harv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776606606, "uuid": "ac89bc97-3bf6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "large-pack4.qi9morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776607266, "uuid": "35f5dbda-3bf8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-task6.qi9morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595146, "uuid": "fd8b2d73-3bdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-feed6.to3vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776633847, "uuid": "192caa57-3c36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-show6.tippyv0lup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776583025, "uuid": "c4e1519f-3bbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "live-stream6.de5xpiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776587707, "uuid": "ab6ffb12-3bca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "living-room2.2zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776563525, "uuid": "5e5ecd03-3b92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-array.qi4morxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776570546, "uuid": "b6b68979-3ba2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-event6.ra3xelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776639547, "uuid": "5eeb2f88-3c43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-trip5.there-way.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776627724, "uuid": "d7732fe8-3c27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lpke7.heaton-stolid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619332, "uuid": "4d627e8c-3c14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumnex2ar.effect-razina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776617651, "uuid": "638b3bee-3c10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumtideen9.cabmic7on.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776560467, "uuid": "3f9b9f54-3b8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lveu.wi3msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776635945, "uuid": "fb92b8be-3c3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-frame6.laryngol-needle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590765, "uuid": "ca5da2fe-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-square5.ra6xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776593585, "uuid": "5af86f20-3bd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media-info1.to3vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576665, "uuid": "f659a498-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media-player6.kymli4rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557825, "uuid": "1896efad-3b85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mediacata.po6vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776589745, "uuid": "6a313a7f-3bcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "modern-base2.ra6xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776560164, "uuid": "8af88fb6-3b8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "modernsilver.wi3msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776620951, "uuid": "127516bf-3c18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moleculeblend.jordan5nual.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776632824, "uuid": "b7ca34c4-3c33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "music-band3.tippyv0lup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776586686, "uuid": "4b3418e8-3bc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-author5.qi1moxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776641468, "uuid": "d7bd3435-3c47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-item4.albann0vosel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776591125, "uuid": "a0fd7cb4-3bd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "night-view6.ra6xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776615968, "uuid": "786e545b-3c0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nor-tideet.cabmic7on.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776627125, "uuid": "72b21c96-3c26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nvxlifpf.heaton-stolid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596713, "uuid": "a3c1a10f-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oblionts.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599531, "uuid": "3392afc1-3be6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocean-view1.wi1msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776636485, "uuid": "3da93852-3c3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-job2.ashes5upervise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776570908, "uuid": "8e99d4b6-3ba3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-paper1.sylom7er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776587047, "uuid": "2265ea2e-3bc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-library6.qi1moxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590466, "uuid": "17f0e261-3bd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-street4.ra6xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776566886, "uuid": "31a77eb7-3b9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "online-study1.6zoranel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776585369, "uuid": "3a0a506a-3bc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-book1.qi1moxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776605946, "uuid": "22ebeb35-3bf5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-box2.qi9morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776629464, "uuid": "e50bb555-3c2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-field5.lucernemo7al.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776616331, "uuid": "50e43953-3c0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oz557xfr.cabmic7on.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776626406, "uuid": "c6533deb-3c24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p0rt-hold.heaton-stolid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776602230, "uuid": "7bd76711-3bec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-link3.de4xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776586088, "uuid": "e6c2b1f9-3bc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-number3.qi1moxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776600193, "uuid": "bdc5d059-3be7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "palm-tree3.wi1msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613627, "uuid": "05242ac1-3c07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pcllgu4.hearkenw2tman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776571265, "uuid": "635ebbc0-3ba4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pencil-case2.sylom7er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622025, "uuid": "9319f717-3c1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ph0ton0-crest.animate-worn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574991, "uuid": "10342484-3bad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-frame1.kymli4rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594485, "uuid": "73d7e5c7-3bda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-shot4.to3vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776633485, "uuid": "4188b377-3c35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-shot5.tippyv0lup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776575591, "uuid": "761cd7d5-3bae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "picture-book3.kymli4rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776610806, "uuid": "74009b85-3c00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pipelinestudi.dickina-exagger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559505, "uuid": "023cb973-3b89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pix32-logic.wi3msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776557524, "uuid": "6568dd14-3b84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "portvelv.po6vtaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776611647, "uuid": "6904d3fe-3c02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "posterharbor.dickina-exagger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776565205, "uuid": "47b0152b-3b96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "profitlat.7zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599173, "uuid": "5e19ba3b-3be5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-void6.po8vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776615606, "uuid": "a1090a74-3c0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pvc1l.merit-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621425, "uuid": "2d082d96-3c19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickque.jordan5nual.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613265, "uuid": "2da65f30-3c06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "r31a6-gate.hearkenw2tman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776585665, "uuid": "eacecd00-3bc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "read-more2.qi1moxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776579726, "uuid": "16a2e2aa-3bb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-apple3.wi9msorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776592445, "uuid": "b3c9237b-3bd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-mark4.sylo9rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776573610, "uuid": "d95eca1b-3ba9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "repair-work3.to8varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612607, "uuid": "a5138e3c-3c04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "retailree.hearkenw2tman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776577689, "uuid": "58a89ee7-3bb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "road-trip3.po2vtalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776625445, "uuid": "89669f8e-3c22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rur4-watch.desa1inatcount.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776622388, "uuid": "6b26ab29-3c1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rzdwkgtc.chernichco5t.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776630786, "uuid": "f8b4fad9-3c2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-store3.elephant-harv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776599831, "uuid": "e5eb4a7c-3be6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sand-beach2.wi1msaren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618669, "uuid": "c26c84b3-3c12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdkmodu.effect-razina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597852, "uuid": "4a6f39f8-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-node2.po8vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776623765, "uuid": "9fd7319d-3c1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sernex2en.animate-worn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776640209, "uuid": "e90de803-3c44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shop-list1.albann0vosel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776580685, "uuid": "526f1dfe-3bba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silver-coin5.wi9msorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601807, "uuid": "7fb8d2df-3beb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-map2.de4xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776624065, "uuid": "53058273-3c1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slu780t.desa1inatcount.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588965, "uuid": "99885e28-3bcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-garden5.2zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776606185, "uuid": "b1363eb9-3bf5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-gift3.qi9morlen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598812, "uuid": "86e70eb1-3be4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-auth5.po8vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588007, "uuid": "5e33c6b7-3bcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-decor3.2zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574631, "uuid": "39cd72ae-3bac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-door6.to8varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634507, "uuid": "a2723166-3c37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-node2.laryngol-needle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776567245, "uuid": "072651dc-3b9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-student2.6zoranel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776637505, "uuid": "9dc94f65-3c3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-time5.ashes5upervise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776617467, "uuid": "f5c007f7-3c0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snqw.cabmic7on.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776593347, "uuid": "cd9a94f5-3bd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-paper6.sylo9rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776618311, "uuid": "ed1fdd8e-3c11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soumea.effect-razina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776594126, "uuid": "9d785356-3bd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sound-mix3.to3vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576254, "uuid": "00ddcb61-3bb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sound-track5.kymli4rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776625746, "uuid": "3cbb3f69-3c23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spatra.desa1inatcount.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776617947, "uuid": "13e27bb7-3c11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spec4-craft.effect-razina.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582006, "uuid": "65ae35de-3bbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sport-match3.de5xpiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776597132, "uuid": "9d255699-3be0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sport-news6.kymli7ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776624724, "uuid": "db77f4df-3c20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spruce-field.desa1inatcount.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776562446, "uuid": "db1f82bb-3b8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stock-cir.bovlare7x.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776615309, "uuid": "efdea404-3c0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stre4m-well.merit-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776604206, "uuid": "1607107a-3bf1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-cake3.bovla5ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776584345, "uuid": "d7eb6b83-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-cake4.bovla8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776619990, "uuid": "d622a052-3c15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t3st-plate.jordan5nual.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776566465, "uuid": "365eab09-3b99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tallithar8.7zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776583987, "uuid": "028df710-3bc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-dish3.bovla8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776642666, "uuid": "a19fca6a-3c4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-meal2.apoth-shopping.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776603846, "uuid": "3f4cea70-3bf0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pie2.bovla5ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776595870, "uuid": "ad110b1e-3bdd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-score2.kymli7ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776636849, "uuid": "16a2af85-3c3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-work3.ashes5upervise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634085, "uuid": "a6daed1d-3c36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-portal1.laryngol-needle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596713, "uuid": "a3bcd8c3-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tg-xxooxx888.8964.mom" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776592810, "uuid": "8d2b4b7d-3bd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thick-file5.sylo9rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776562865, "uuid": "d4ec5a49-3b90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thxzt16c.qi4morxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776641948, "uuid": "f5f7f4d8-3c48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-deal6.albann0vosel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776609426, "uuid": "3d123616-3bfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "traile1-wave.craftf1uctuate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776638228, "uuid": "4c505aaf-3c40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travel-blog1.there-way.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776568866, "uuid": "cd93522f-3b9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travel-guide1.ra3xelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776621664, "uuid": "bbacb427-3c19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "triggerunload.jordan5nual.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776570187, "uuid": "e10d41b5-3ba1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trip-advisor5.ra3xelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776612252, "uuid": "d1b209c4-3c03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ul9d3.hearkenw2tman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776614286, "uuid": "8e13c59c-3c08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "umxburt3.merit-susyuka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776590046, "uuid": "1dafa55d-3bd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-style3.ra6xovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776601568, "uuid": "f1addec5-3bea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-info1.de4xpamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776559146, "uuid": "2c3b6ba4-3b88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vialnoti.wi3msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776593765, "uuid": "c6560b84-3bd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-clip2.to3vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776576009, "uuid": "6f559a7e-3baf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-clip4.kymli4rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776611886, "uuid": "f7401996-3c02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voltquarry.hearkenw2tman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776558845, "uuid": "787987c0-3b87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-spireos.wi3msorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776588425, "uuid": "576eb36d-3bcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-house4.2zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776574270, "uuid": "62ad1ed5-3bab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "water-pipe5.to8varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776582306, "uuid": "1871600e-3bbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "weather-post4.de5xpiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776634864, "uuid": "7775b894-3c38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-server3.laryngol-needle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776598151, "uuid": "fcea6cc4-3be2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-tunnel3.po8vtirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776571925, "uuid": "ecbf39fb-3ba5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-board4.sylom7er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776591786, "uuid": "2b04b3cc-3bd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-page2.sylo9rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776580987, "uuid": "06899f77-3bbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-snow6.wi9msorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776628445, "uuid": "857679f8-3c29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-river2.lucernemo7al.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776569584, "uuid": "79b98667-3ba0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-map3.ra3xelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776581709, "uuid": "b452eaf2-3bbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-press2.de5xpiren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776638471, "uuid": "dd3854d5-3c40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-tour2.there-way.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776596713, "uuid": "a3c04eec-3bdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "x.vodxz.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776626707, "uuid": "795a8681-3c25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xazhg.heaton-stolid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776562145, "uuid": "2798fb9d-3b8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yabplkm.bovlare7x.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776613810, "uuid": "7276cf0e-3c07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zoommeetingg.click" } ] } }