{ "Event": { "published": true, "date": "2025-05-05", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-05-05", "timestamp": 1746489788, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "a191214d-0b68-4d46-a122-6e0720131281", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1746403336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403336, "uuid": "7905f98b-f25a-43d7-ba75-f022b109d496", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403336, "uuid": "8b47b46e-c368-43e9-b6ce-81620e5a6f02", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403336, "uuid": "bca47d92-0044-4c4d-8dcb-636ac21a187d", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403336, "uuid": "f847717e-6cac-48ea-9aca-e9b77d619093", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746403336, "uuid": "ef7119e7-5cb4-45b4-b4e7-e7528f76a856", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6afa6242-2944-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1746403427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403427, "uuid": "1323f167-0c93-413a-bd3c-8cc32278b308", "comment": "Malware payload (LummaStealer)", "value": "37ae4c4ec8df130c0a2467f2e7650a16", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403427, "uuid": "a63f78bd-cd87-4b06-8b3a-a9d91b960d22", "comment": "Malware payload (LummaStealer)", "value": "7d3bdd7c5762cafe591054d82c512d50ca097fe900f44db8b5478c0c0d582067", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403427, "uuid": "2daf6429-54ee-4424-ba9c-551066e78d6c", "value": "T1BA95232908B64009F68EE73E1D1EF4656B01BE9AD4D9BC731C8856880F77CB1B371D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403427, "uuid": "14962608-175c-4ca4-bf21-9b3ba21f6071", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403427, "uuid": "9322638a-98d5-46ea-877b-1aa80dcff606", "value": "49152:k0/mUotQDATbC0RboEFmsbXMhdV7ACC4vN36Oo2:dotQiO4RYsghdV7A2N36", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746403427, "uuid": "cc0d69c9-4068-444e-866d-279ec67470e7", "value": 2042880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403427, "uuid": "9e87597a-ca5a-4f3f-a8ef-d4f53e25ed76", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcd1a548-2484-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746403654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403654, "uuid": "2ba63462-e797-4ff1-91d6-97fdde55704e", "comment": "Malware payload", "value": "1ac93024d694565cd9e1eedd35723dbe", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403654, "uuid": "a8947ae0-6413-4985-89c1-a120a1d0d181", "comment": "Malware payload", "value": "615b66765eae378f7c04259a57861d28ea38fdd43f88c3ce0b6c065850baa36c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403654, "uuid": "a001b4b1-88d1-4dd2-9815-32b3032598ec", "value": "T14B44C5BBBB89233504E39355364E35DD6229D030A276876038DFA11D179606CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403654, "uuid": "fa349949-4d32-4e5c-a170-db9b22321673", "value": "3072:xAf/GI48THyH2GI48GHyHbHyHlGI48rGI48n:qf/g8byH2g84yHzyHlg8rg8n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746403654, "uuid": "1bb895ab-18e8-4fa0-8db7-38a9b2b5a721", "value": 258481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403654, "uuid": "13f87145-58c6-4a60-b036-1700bbaee562", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746403657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403657, "uuid": "2a425fb8-14a4-4e48-b92b-e4b3fefdf0d9", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403657, "uuid": "b7453616-165f-4afb-900b-ef2c4220cd96", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403657, "uuid": "0a03da92-9ecb-4e8a-a78c-5e3c36aa3098", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403657, "uuid": "710e9213-9032-4572-abf6-1e2e788f9216", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746403657, "uuid": "deb43c6e-09c6-4f05-88d7-60485c3d1c59", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1746404111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404111, "uuid": "d077da5d-ff08-4c4a-9f73-14163cb825b3", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404111, "uuid": "55ff47b9-610c-47f7-a3de-6a9aa9eb511f", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746404111, "uuid": "cb6af1b5-3800-415b-b0d8-f4a0d11ca811", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746404111, "uuid": "d6d7d12c-368c-4a32-91fc-3ea39a701a8b", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746404111, "uuid": "bf8b51cb-bffa-4230-8734-7d6466d7b289", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28c03d42-235d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746404631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404631, "uuid": "d882b7ff-eb28-4ec5-8898-cf528b52b5d6", "comment": "Malware payload", "value": "824fe80080f180b4d83a5ad4a9500d95", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404631, "uuid": "0885ee9c-1caf-42bf-93c5-de11a41a36fc", "comment": "Malware payload", "value": "3032858f4b83daa7a7b85371eb0b9d6d642471c459dffd2e62ae4e379a963fa1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746404631, "uuid": "c0cc21fd-d5b0-4f96-9761-76e34dd30148", "value": "T11B24B77BB789233104E39355364E36E96225D130A276876038DFA12D179607CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746404631, "uuid": "1cdf28ab-97b6-4902-8f6c-7eddc273e702", "value": "1536:LN2YOCIZix5CnBJskQhQ6gZM5yi32D8shq2d8s4O4g0dmSJx5CnBJskQhQ6gZM5J:xpUka4oHo9a4o6oYota4oVa4ou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746404631, "uuid": "be0aad23-236e-4222-857a-ac963525768d", "value": 229087, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746404631, "uuid": "803ed312-454f-4ae4-a16d-ae1cc88489d4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746405431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405431, "uuid": "115159b6-ff1d-4cee-90ab-58bc2807a891", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405431, "uuid": "377b401e-baf1-4d52-b45b-1c6a4b0c1b09", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405431, "uuid": "4574b25c-f309-4702-bacd-9a06556fb485", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405431, "uuid": "96daa8a4-374a-4977-8f84-2538697a06b0", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746405431, "uuid": "6710210f-a6ee-4440-bdf9-90eb6c9ea224", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec6789a5-294a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746406221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406221, "uuid": "fad04e3e-a611-4d85-b22e-b95ae6459f6c", "comment": "Malware payload", "value": "e10fa6b187608f4385a8354c7d6d606c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406221, "uuid": "3e2a7431-12ed-4450-943e-2d0c2d467310", "comment": "Malware payload", "value": "111b7a2f8988cb30e74f51e66f7083f84c4b53f0971c4b5f1007547355e6bb35", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746406221, "uuid": "2193f0a5-1e85-4b2a-b25c-742596ca2674", "value": "T111C5E095FF88E42EE47741334E668B36D14A8C5E9A42D31345ECB22C19B75C48FDAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746406221, "uuid": "6daa0dcb-321d-4147-896d-61610bd17048", "value": "49152:R2b4CztLOw+khUJ/YNsW3sDtN4RJKeyv3kPiPnTO16RgCM5GgvgNpX/d6hi:Xa8w+z/YXcX4RJKeDiS3CME6hi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746406221, "uuid": "d237cc78-52ae-43dc-8be6-aebc244e21fa", "value": 2628373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746406221, "uuid": "e07b5aab-52c0-485f-88c8-da7d9e709028", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52eaa57d-294e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746407682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407682, "uuid": "937bac7e-c718-482c-8d72-3d9d14aa33df", "comment": "Malware payload", "value": "0c8979a6e7bcfadfa7a2e62e82026b80", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407682, "uuid": "c5f0a165-01a7-4425-b45d-97a698974263", "comment": "Malware payload", "value": "16fbe689ff29a14841d8267311c83fd4423086347a6c9f4e82c54787a63dfd58", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746407682, "uuid": "4ce65e51-6557-4acd-b552-0e2a7b793077", "value": "T15861320459B310156453E43977EBA21A1A28EA5BD34FEDD43FCD4244CFC56B99D833", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746407682, "uuid": "e8d8c59f-cd1a-4d56-9848-75a263712351", "value": "48:/5CiyNwnb6HkGFt8w7QpIzrOE94uV1g/zCwEZxiV5j:/5Xpnb6EGo0Q6zrOy4uV1g/zDEZxIx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746407682, "uuid": "ee0f0baa-d55b-48af-926a-2ee982ccd6da", "value": 3273, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746407682, "uuid": "239deaa1-6cfa-4a19-9ac8-679a7a91bf22", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746408496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746408496, "uuid": "7eb85727-6417-48cc-a048-77e6c137eb48", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746408496, "uuid": "a2edbb83-b546-4747-81ea-15b18f98c0dc", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408496, "uuid": "92a66866-a1bc-4d0d-85db-d285cbccc50d", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408496, "uuid": "6797302b-0283-439c-b403-827d3f3cf4df", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746408496, "uuid": "72485c66-7c2a-411e-90b8-09dcfa44cc32", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d4fbc60-253f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746408686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746408686, "uuid": "ec0386ff-c083-45f6-9f0a-1c9255a94e68", "comment": "Malware payload", "value": "b985cb7df5a596d956d5cc4292fc377c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746408686, "uuid": "1adc546a-b4af-48ec-b997-f53b3dcf1af4", "comment": "Malware payload", "value": "18b01630a2df6e0aa6d69d31297ec07c24d7e414fd2a92e31b5c12873cd4965a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408686, "uuid": "0aa5fc01-2c01-443d-9878-f79ef34b0e2e", "value": "T11404C77BB789233118A39299364D35DD6225E130A376876038DFA02D179507CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408686, "uuid": "17dc00e3-7c5c-49b8-908c-b1d171171d45", "value": "1536:LNWhR+PgylXqsoeJKP2QKKYN940PgylXHsoeJKP2QKKYN94zsoeJKP2QKKYN94Nt:xVhQsj+Y3hpsj+Y2sj+Y4hEhO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746408686, "uuid": "b2980b60-62dd-4067-9226-27f4a90d1cef", "value": 184726, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408686, "uuid": "1402c6f2-ad7a-4421-8baa-971db6f5983e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79e0f5cc-2954-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746410324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410324, "uuid": "90dccd47-be48-4974-86e1-11bb03d11b8c", "comment": "Malware payload", "value": "fcff6b9402a87c58c62538b4e4765649", "object_relation": "md5", "Tag": [ { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410324, "uuid": "1124e2eb-32bf-4ce4-a9fe-7c90609ad19f", "comment": "Malware payload", "value": "3876a71e91e860188689b9e0f88460b825f6dfdb8d7cbfbbefc16ad34e862c11", "object_relation": "sha256", "Tag": [ { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410324, "uuid": "abb7493e-67ca-48ef-ae7e-38934095e67b", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410324, "uuid": "c2c3f545-f840-462e-8958-5ef998847e2e", "value": "3:6ekfv:6Fv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746410324, "uuid": "a8fac487-e3eb-4cf7-990e-c90f933654ce", "value": 202, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410324, "uuid": "f0c6ec3d-43a3-446d-a152-460885f10882", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "089d7f0b-25b1-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746410644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410644, "uuid": "bd3f54c7-cf5c-4162-9217-63ff69987c97", "comment": "Malware payload", "value": "8106f48b2afd7ef504ba8b67cf644d48", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410644, "uuid": "da3917cb-4572-4e4d-98fb-2b3de6caf705", "comment": "Malware payload", "value": "b1511c964b0c55922bccd1095375ee005ac32f944b535a4669555cee72fe37b0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410644, "uuid": "2ed373be-d52e-4cc3-a3dd-05886e0d8459", "value": "T13824C57BB785233608E39355264E26D92329D030A276C76038DFA12D179547CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410644, "uuid": "4a8fef36-bbef-4f14-aa21-a87e3fcb8f1c", "value": "1536:LNaaiEpZVZe4553vRoB5iT73uXNlD2iIQpSf0vj6Y2jED8pZVZe4553vRoB5iT76:x9LiIK654iLGIK6543IK6549LILq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746410644, "uuid": "1fcb8c94-7cb8-4c89-a173-7e95dad81ae2", "value": 225862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410644, "uuid": "1b6b6f7b-15f5-4f7f-be1e-bfd4fe9a5d10", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ffeced1-239f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746411482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411482, "uuid": "0b9b2d0b-8bc5-4110-a7df-4f58b7c70c07", "comment": "Malware payload", "value": "d2390bb3f89237f8244cb6454f22ab69", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411482, "uuid": "6d9eccb6-79ef-47aa-bf87-87acb772c5fe", "comment": "Malware payload", "value": "f37ae7f9f435046d372c91320c66c5c1e0b293982e48ba09ec7f683d748a8e96", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411482, "uuid": "19e32b06-271d-47b6-9240-f87246d3d50f", "value": "T15824B77BB785333604E39255364E36ED6225D130A376876038DFA12D179906CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411482, "uuid": "6101ffb5-f193-4d47-91c0-e47dde03a19f", "value": "1536:LNg6i/dDlqTtqfZA0b5bMwOx4JMhleeX6lEZlqTtqfZA0b5bMwgx4JMhleeX6lE6:xwgqtbB5I2qtbB/IqI0qtbBRqtbBt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746411482, "uuid": "84f3a952-6c41-462f-84e8-49e828031619", "value": 227960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411482, "uuid": "92e2df78-2cb5-461a-9215-7578d7af9d42", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1afd33a0-295a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746412742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412742, "uuid": "1c4d3152-70bf-4a01-a6c5-c0b9e7a2dc6c", "comment": "Malware payload", "value": "68f00a72563f2578e881e0d1ef9a31d6", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412742, "uuid": "67970698-68da-4e73-b1ec-00913d252931", "comment": "Malware payload", "value": "165f70040e1a842a9d050026ee0e00d8463b417493041493dba01b94796a1bfe", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746412742, "uuid": "c8d1501c-ac07-4b79-ad30-78884b6e775f", "value": "T103349D64D7782227E73900B9B9B1D3B438FAF130ED276B45716F4829D5C4A4CACEC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746412742, "uuid": "af0318ea-7378-463f-9c33-5d5e04f071dd", "value": "1536:GaDFUzq/HYc4jf2aWgNgu5W3wBiXCsTRXmMW7S6VRsKzrrdV0RbH9oZ8g5u0KaJR:cHTcHC8Yp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746412742, "uuid": "7dda94f5-d2f5-4949-b39f-d05b699cc3a3", "value": 236132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746412742, "uuid": "7a7d45d7-df6f-417c-9a1a-29a420edf6e1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0a5da09-295b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746413503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413503, "uuid": "8141cbe9-ca8a-48d3-8b78-89d533e93446", "comment": "Malware payload", "value": "8beb27649fc7c22c53f2b1e4100dcfa8", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413503, "uuid": "1598faa8-f719-46b9-a837-b7d5267eef29", "comment": "Malware payload", "value": "04841746a20895c52f2c16d1022cdf0da4d9a9108bc0a1e1b9779628dc5259f6", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413503, "uuid": "c8b362c9-35b8-4ca3-812d-ef2ca89c60dd", "value": "T16153E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413503, "uuid": "959801b1-2113-402b-8a04-a8239f78e8dd", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/d+9R1X1t1RB1p+dB2sA0:aA1fho1P6n249R1X1t1RB1p+d01i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746413503, "uuid": "10bde7eb-9f27-4f8e-8c81-6085b080af42", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413503, "uuid": "ae801671-e2b9-40e2-afc0-1c5570993e38", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82514cfe-295c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746413774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413774, "uuid": "e160e762-be6e-475f-a9ed-112e89a99f9a", "comment": "Malware payload", "value": "6c883d7855f8572e1877e6c8a4eceacd", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413774, "uuid": "1624cc0e-b953-4b99-a0e6-4d11cb40fb81", "comment": "Malware payload", "value": "e205d418e5ccf7c24dd210cf81fd9a641ff5c9c9628507ba512dac351f47eccc", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413774, "uuid": "7744089e-9a86-4775-93bd-12a2cd72e8c6", "value": "T116E0688F911340BB7851AAA67EBDAC04F14E20CA47C6132956FDA1D694BCDE834811", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413774, "uuid": "66734bd0-88f9-4c2a-a5b3-36414dd82050", "value": "6:hveVYrtBtFyOnFfljMo3F4KdxhVKEn2LsVKE6NiVVNDV2uVdFzeGqeYUXj5:9eEt1PZzgQMsguTh/qeZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746413774, "uuid": "78f1974f-90f8-4b72-8e3a-97ad83a9b552", "value": 390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413774, "uuid": "48038df4-8ae9-45a4-874c-3c58845c08e9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b2b097-295c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746413914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413914, "uuid": "6080bc88-3942-4b36-b48a-bf74fb64f157", "comment": "Malware payload", "value": "049b6000fba67c0631da3e861007208d", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413914, "uuid": "f4c75aa4-2ee4-47f1-9516-f59f1664ef2b", "comment": "Malware payload", "value": "f34fffe2f90eb3c30b936ff5a941853c23c8927ead1cf3ab6c2fa697616cb618", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413914, "uuid": "ec6a5ebc-fb43-42db-8bd8-03378ea040f1", "value": "T1EEC2C77752802059123BC5DBE8B977B9D263F3E8C318E98DA8D44C6D1F85FA394106", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413914, "uuid": "049bb71e-306b-4231-9613-bd5c6df36c94", "value": "768:gVCsRk5afyMKyz+HElw08CzD4ZMxa84gT7aH3iuxCWjsRAzRXz/tHg:DemafdKyz+HElwXCYZMxa742XiCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746413914, "uuid": "84acfa5a-4f8a-4644-8bdb-a1ff3b551ce7", "value": 27111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746413914, "uuid": "058cf082-cd5b-467a-bc4a-38ff1c614c30", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fb9431f-295d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746414065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414065, "uuid": "dff8580b-7d11-49ce-99ad-7f1e4cb4e755", "comment": "Malware payload", "value": "e18ba967b2e2d081ddf2efb848ebf686", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414065, "uuid": "987120cb-aa8f-44ab-8287-37160b8a44ec", "comment": "Malware payload", "value": "240d1b8340faeeb730a679c7d12dfcb8491e6453ebb10f2fe91421ee41e24be6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414065, "uuid": "143cc156-0784-4fca-82f2-a939802f92fd", "value": "T1E45136C0B172B8343CB754DBB36A5CB9B1D151352CA19E44A5EA78E44DCDF0327882", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414065, "uuid": "81e6cad2-7e55-434d-b565-a0277cdf962f", "value": "24:IjydCLySCLys0CLynxfCLykCLybCLy/KCLy8fCLyxbCLyoLpqPjCLy60+CLywcj0:Y51qPX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414065, "uuid": "04b70884-5b27-4551-909b-ab7d95836b7c", "value": 2488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414065, "uuid": "83fb60b8-4bf6-4563-8cb5-4c11322b0ffa", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fdfd15d-295d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746414066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414066, "uuid": "36620ccf-a4dc-46ef-a05b-5fead9c6ac2a", "comment": "Malware payload (Mirai)", "value": "697932f032b40d1818262ab21a410b1f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414066, "uuid": "0992c52b-780e-47bf-8276-2dd83ea13077", "comment": "Malware payload (Mirai)", "value": "89a9497216469ba424b5536580708c719b22bf4e6433ae1c5ce0561513241bb7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414066, "uuid": "80f0c6d6-98f5-45a1-a77e-2826470db6e9", "value": "T126416DDD42215621464CCD5EFB73E5595202E8C0E7E11A99F8E88439ACD87C7F065E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414066, "uuid": "e116e0c9-0229-4601-8191-2e64a3c81b92", "value": "48:Kv32N7z8wUhCDDyhoOOdhxv3vNCzdwUQ7qqyQoHOdQjv3ZNkzvwUCF88yCohOdC4:VP1nGukMAB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414066, "uuid": "f2b5f6f2-1ab8-4608-b2b0-6bd4c7df8b34", "value": 2370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414066, "uuid": "ed6206c1-f46d-4112-aa73-e5f6fc2597fa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1746414069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "c02ec149-530d-405e-adf2-69513aaa5fa1", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "5d8075f4-fe9b-475b-b21c-979b48bae3e0", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414069, "uuid": "1cfbe68c-2542-4f00-b67d-1c2d3c2f1859", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414069, "uuid": "f13f0d9e-d2fe-4108-82d0-3c9442e59b13", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414069, "uuid": "9d04568a-853c-4da6-878e-a5e3ace5348f", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "334d7e78-295d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746414071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "a5061490-3d0c-4562-802d-ac3b6f27f57c", "comment": "Malware payload", "value": "ea9b99924ce1358a20badfa03df579a1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "d847ea11-2061-49ab-a3de-5bc196a87668", "comment": "Malware payload", "value": "acb7839b5c22fc3190273adfbec791a7aaf02330f789d6758dae31fa2d5aaf3f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414071, "uuid": "49df086a-cb67-40fe-bd6c-f45c18e10252", "value": "T14441B8C16267CC342EB214AFF1AECCB9F5D661290CA6AE4065FA34F4449EF121B857", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414071, "uuid": "0a2bbf0a-b7e6-429a-8c6a-6b05371031d5", "value": "24:ISkCZbdCsC4kCsCLpCsCFBfCsC+2CsCxb7CsCwICsCcEfCsCLZCsCiUHPjCsCEHk:wiOoOOsCOcpiPBWuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414071, "uuid": "775de968-7dfd-47d3-9d37-302062c11248", "value": 1985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414071, "uuid": "fdaf9b89-c7ab-4c30-b622-891fdb0c5c18", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74bb3d2b-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746414089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414089, "uuid": "5421dbed-ff57-49cb-b04d-79ae5e093026", "comment": "Malware payload", "value": "f4d00187c40779496d03f5bcb6c57a92", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414089, "uuid": "59f6c0bf-f2eb-41f6-9ba2-62464ddcd715", "comment": "Malware payload", "value": "89d406c826d6fd125c3379d8710b5790b16a3d1b7eb9265e8a0919880fe195b2", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414089, "uuid": "95bda05d-7909-4d97-b15f-bc0bb07c7ad3", "value": "40C2F2A01363264AD762CEB83A69341FC428615731691D402CD1A68FEE5FF249879FFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414089, "uuid": "7c912790-d778-4a56-8c43-1b1864808bd3", "value": "384:yb2eX3zAKuiNPZRwwqdvrrduMXbCAk6Y5VvCYxy0kJXPav63BNjh:/kAKuobq1rduMGAXSEYEYv6Djh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414089, "uuid": "da2433bc-f789-44f4-95e0-119932d15f2a", "value": 26828, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53978c40-295d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746414125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414125, "uuid": "4eaaa7f1-2d6e-4767-9a39-bbd86a5fc5f0", "comment": "Malware payload", "value": "a37b5b55dfbb7f36611b7c1e89c7bb71", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414125, "uuid": "c1116900-37fb-4dc8-83c1-6784f74698c1", "comment": "Malware payload", "value": "f88e4aa10cd00c17969a9097292353b13a76b9101baedde9e19589ce3eeac183", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414125, "uuid": "2e4e684c-696e-40d9-bc55-118deab71e62", "value": "T12151F4C96213DC342C7A49DBB2B9CCA8F1D091B56CA4DF40D1BE28E949C9F453B98B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414125, "uuid": "cb44f73a-c40a-498b-9b84-f67c13199e75", "value": "48:vrWwrp8rH8Krah+rrYru2rRErFsrs6raFaqPErv0r50rAD:v9Gxe+QnmadLIe4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414125, "uuid": "de8cb876-98ca-4abf-82f9-d8247cf4aee2", "value": 2594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414125, "uuid": "a73f7588-0f28-4256-a8b4-9fb4e7f03d6d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66f4225c-235e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746414205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414205, "uuid": "2fda314c-dab7-49b4-9c6a-8ec46c042f4f", "comment": "Malware payload", "value": "40b9acef2fbabff686edd0d8d06d612b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414205, "uuid": "473032da-2f31-4761-a16d-107ad471862e", "comment": "Malware payload", "value": "163e5132f8da5ab65150c46a2a5199972afeb4c07c04bcf2214ea87af5a805c0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414205, "uuid": "42c0160e-a52e-4ef9-b2f9-f0cbd21e7211", "value": "T17C14E87BB785233518E3A255260E36ED6229D130A336876078DFA11D235507CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414205, "uuid": "64dd0a31-daa6-4f6c-91a0-71deb651f576", "value": "1536:LNJKevJniuOd0dteIP2Lzn5nfOYDYjCZjAYokt5QniuOd0dteIP2Izn5nfOYDYjb:x/K5hDPYUuT5hDPYUp5hDPYUxwn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414205, "uuid": "af3aa3e6-614a-47b7-9cb7-a72ac0df2a02", "value": 198218, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414205, "uuid": "0fb4f670-8caa-4284-a6d6-56efc43e4b3d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da3ef40c-295e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746414781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414781, "uuid": "8d539809-8b69-4836-9b0b-4d99673cdb85", "comment": "Malware payload", "value": "06bd63f02ab9ea8fdb6705f1383af612", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414781, "uuid": "04de3679-255c-4c05-8213-7daa5a574d95", "comment": "Malware payload", "value": "5f46b0aab769da34344ee0e96647cb4e8f081071ee7d6fb961e9e40cc70095f2", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414781, "uuid": "11c5bc47-4925-4278-b141-c4366eeffe8c", "value": "T153C2C7775180205A123BC5DBE9B9B7B9D253B3E4C318E88DA8D44C6D1F85FE354106", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414781, "uuid": "0757302a-6979-434e-a7cf-c04db10164e9", "value": "768:gV5L1k5m1yjQy0Zjfa4P5+1D7yHq8UTyHniuxCWjsRAzRXz/tHg:i1mm1qQy0Zjfa4x+9yHqfyHiCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746414781, "uuid": "d7505f70-a96d-44be-940f-a7581ac458e6", "value": 27111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414781, "uuid": "d73591d1-9f40-4dde-9022-57231335159a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ce706d7-2960-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1746415376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415376, "uuid": "54caddb2-4d97-46d2-a9f4-4727b257bd76", "comment": "Malware payload (LummaStealer)", "value": "150c4e9344e17da4ef7878ea95e2efd0", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415376, "uuid": "726a09ec-f730-43d7-89f4-07ec5972413f", "comment": "Malware payload (LummaStealer)", "value": "faad33b7facc47d66713cb1f6a1514754dd344d4525f0092029f0ec4b7aaf98b", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415376, "uuid": "0cb4ca81-b204-4fd6-8087-948e87e416a2", "value": "T12F9522618A8D98BAF156CC725DE53DCB0495A5C8B38BFD01D31C97B62CB0A7E8D12F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415376, "uuid": "fef6c8e3-be53-4925-909b-f608540b8271", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415376, "uuid": "7f168ca6-a062-430d-bffd-8658b82a9eec", "value": "49152:1cqDAiYPmWlSAvIo6JJiDIBAo4fTYZd+ezMpcjly:2qZYuWlSAvGJis+YZd+eXjl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746415376, "uuid": "d84c5705-c817-44fa-b4e6-79a8099eda64", "value": 2060800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415376, "uuid": "247b51b6-bd10-4576-8348-92611b3dc8c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e3ec819-2960-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746415459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415459, "uuid": "8a6fc691-d5bf-4e5b-a3dc-e4cc5d557396", "comment": "Malware payload (Mirai)", "value": "70f892541a39fbe089a512f495198059", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415459, "uuid": "af96bebb-0ca6-40c1-a05f-2ff715175e23", "comment": "Malware payload (Mirai)", "value": "c7531126266c88c794a64797fdc8f067c63539e4b83927dc7342db5d190bbb12", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415459, "uuid": "567bb14c-14ab-442f-8008-a59943b51b10", "value": "T13431A5FD14B1D52B9099CEE0B4619D6CD83EA6C43AE04F1EE89E3CE66E06E05712DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415459, "uuid": "b0ba1664-aa1a-4bd9-81e6-5be94d87706a", "value": "24:QvZi4w3Rkw62vFj95G+o+tgHpLigiqNI7LdbHqKU5IYJ+Vxp/FZ:QvZi4whhG+ZyHBiPjRbHq/IY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746415459, "uuid": "6e2f04ee-63d7-42ae-b828-ea4008bfa41b", "value": 1549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415459, "uuid": "a38c5b26-3b23-40ba-9ff4-acccf0d4b8fe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746415926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415926, "uuid": "aa1c17db-c875-4602-b9fb-ada47f671c46", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415926, "uuid": "d427bcee-01cd-435e-8174-832b03585944", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415926, "uuid": "42af0ec7-15c3-407e-a7a0-496302a56ff6", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415926, "uuid": "8beeb60d-663a-4d4e-9d2c-12657a199cd0", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746415926, "uuid": "3e2d208c-6154-4dc9-a512-f3fcc523173c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d9c4d09-2966-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746417981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417981, "uuid": "72c2c2d5-65c6-4077-8fff-43a6d09de618", "comment": "Malware payload", "value": "548632b7b7448d09a73bce8d220cd6f2", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417981, "uuid": "de28f3e7-bec6-4ad7-ad43-c8be55d6984d", "comment": "Malware payload", "value": "9464589cbfdcd162be2e6b39e040f5a70132c0abbcf411bf7c88ba5d0127ced4", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746417981, "uuid": "999b6ba0-0b9b-47d4-a6f2-60b2651ec48e", "value": "T16E34F16D6DB6B185F40AF11B09A036735FD122226A1281A80FD3BD1982C7777E707A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746417981, "uuid": "feecfd06-1df3-4277-ba22-3be8d094e9f8", "value": "6144:A4a/Us0mWxuLjwExhwXRX3o3PgkIGc+0nMGT58pxaNZEz:Bhs0LxuLxuX3o/gkIB9nMK5UIZEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746417981, "uuid": "9bda61d6-211c-4467-81fb-602d397864d6", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746417981, "uuid": "d261ec35-d5d3-41ed-b1f5-ee22db337e78", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef1aa0d-2966-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746418144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418144, "uuid": "abb177fe-a779-41bd-9062-2467ea55dd3f", "comment": "Malware payload", "value": "3d12d3ee0900d75145e437f83195fc0c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418144, "uuid": "0bf83cd0-41e2-4060-a0d1-19a6ba51c96c", "comment": "Malware payload", "value": "1cf5c664096f79ee08ef38487bfca913a55e040ae9cc9b6e3d12dd5d5683e0da", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418144, "uuid": "7f36e141-b85d-4134-a39c-799d2166a48c", "value": "T15EA6336EFF5F4AB0F7C8493056BEE404E38C5F5908B25A229169F50249BDEC7CD867", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418144, "uuid": "7ccc8abc-4dd8-4503-81bf-917032af6883", "value": "097a53de9532d3605d91ff5bc1276e25", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418144, "uuid": "a2113d37-27ea-40f0-a14d-77bd8d108f3c", "value": "196608:1qG6QQumBvrCfCVeajsll5i6Eyu5rlRwgS+uGHC3tO5TuxB8G:1VPQbjjvsll5DEy2rbTuC1l68G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746418144, "uuid": "d324f3bf-127d-4392-80e9-43fdf4106967", "value": 10409176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418144, "uuid": "c8b7edf8-77ad-4387-81dd-1851b0663f29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19258105-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746418159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418159, "uuid": "df7224eb-880c-48cd-86f8-65ca1f0386d4", "comment": "Malware payload", "value": "f860c4318ab1cfd43fafd24f99c176cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418159, "uuid": "a41e3e88-6525-4b49-9988-c5e00eef6f0d", "comment": "Malware payload", "value": "d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418159, "uuid": "1c246475-ca95-475f-a556-662c3487561c", "value": "5972E18A2EAC3B07F4B296F2F33C7E58F3052E9D76679817D199712350A301AA114C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418159, "uuid": "81f59333-da3c-45da-bd89-136add45d74e", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcn:YTYIDfYG6ZmewZ59+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746418159, "uuid": "ab9eb071-17c4-45b1-ae42-60e340aadd73", "value": 17376, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f436428-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746418709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418709, "uuid": "0e38a727-7743-4fd1-926f-4a7e0219e7e5", "comment": "Malware payload", "value": "40c589cd968282d40e610646d9fd69c0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418709, "uuid": "4bf26db4-0c10-4f0c-8d78-af3031db2c94", "comment": "Malware payload", "value": "b216b60b3aac5d8f038f79f834b449bd93fa4c8e53bc9c10d04b47041d45da46", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418709, "uuid": "b72757aa-76e3-4dc0-9c78-005795a02f48", "value": "8A64028BFF367C1BCB001BF225DB4F9DA96C665B82C7E091B6C0444F26E51C676A12C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418709, "uuid": "d44bf5c0-f6ac-4372-a5c4-bff2113ac96c", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio:p3lOYoaja8xzx/0wsxzSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746418709, "uuid": "7aaa9676-1dcc-4dca-9869-22f191298c2e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f066501f-2969-11f0-82df-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1746419543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419543, "uuid": "6c31430a-fcbb-4387-9c63-7ab4ec98f5dc", "comment": "Malware payload (GCleaner)", "value": "ee92306ca64b71d22f8e8d7c56ef7c42", "object_relation": "md5", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419543, "uuid": "8b5d7b2f-cd2d-4397-9b69-b209e17f1899", "comment": "Malware payload (GCleaner)", "value": "0ec95dbf3e16639cf75372f71d0c13401191b08a610301ff0b05ca9d98b94c2e", "object_relation": "sha256", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419543, "uuid": "c0e69c5f-c318-4f5b-b8ef-09b4e5127a46", "value": "T1B51633C8D7A7339FF3B1E5BC9BD4AA8268595C51EC4ADD3A72088DA13C67370D1024", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419543, "uuid": "fa676bf7-1258-4df6-91e6-ef3767a114b9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419543, "uuid": "8d429eaf-0855-4778-8246-01c4d49530e3", "value": "98304:AguRQ9RqohyCeeZ6tfl8XPCJMH4ELIISBd1J1p1BWZcy0uPF:AbR6R1Xfi8mxJ1Bty3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746419543, "uuid": "f056dbbb-6466-4929-9f1b-39e215e83891", "value": 4398080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419543, "uuid": "52b62fdd-6151-47c1-8724-b977a04156f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ad03b3f-296d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746420956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420956, "uuid": "1313f843-3048-4287-920a-5291fe126168", "comment": "Malware payload", "value": "f8098ea761dfc171790394f51becbe45", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420956, "uuid": "a10e49bf-e429-415d-8bf6-aab271a73567", "comment": "Malware payload", "value": "1c5508ac04b137506e8c40e715c3e94c30acc617a9e953466aa20109aaca07c4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420956, "uuid": "370a5481-5965-4537-b838-c7be610541b0", "value": "T19F24D0FBBB02AC34C533E7096C913344505E54E17249BF1BD9B5D2BAAD3189E0EB6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420956, "uuid": "cae5e199-0b6d-407e-b9bd-81042f79b191", "value": "3072:bPeb7H4Kwco0apyOOaXefIWCmjI2aL4MExkO+0RqkriuvgF/6OaYOX5uoAUcfacS:bPEHjPagOOaMICc27BxriuaiuodcfDO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746420956, "uuid": "06b6f46f-d65b-43e1-bbad-58c455e3b6ef", "value": 213565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420956, "uuid": "f0846ed4-723e-4ccc-9565-55c9b03bbab7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "461361da-296d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746420975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420975, "uuid": "933d9b62-1373-416e-b0f8-61fb829b3b8c", "comment": "Malware payload", "value": "2624ed2a30c3b26d835afcd1999cd38b", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420975, "uuid": "0a7ba415-3357-4d52-b641-07a5ea11ae2a", "comment": "Malware payload", "value": "dc0ef4a695e8bc2a08ef960ffa4e860f0c6c691f5369b6771ce816ab03301f45", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420975, "uuid": "4a79ddfa-f585-46d9-909a-b9617337e53a", "value": "T13C34F10E66FC5A577E0D31DAE1C5334BCA80E3C2A0B979662C27F5810A14F84D6D6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420975, "uuid": "a06341c7-ef95-4f91-9928-68b720eb8105", "value": "6144:sIgn4EU8izkLoH3+aTUFpbSZ1YgNpa5zTIyOGjNh82DHr2:sIa48B0HuaYoZ1YX5zMJ2z6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746420975, "uuid": "364ce799-5a2c-4d53-9b92-d32a27e19fdb", "value": 247877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420975, "uuid": "5a645d6f-f1e8-408b-b87a-9cf65c48fe7c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa96e12-296d-11f0-82df-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1746421063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421063, "uuid": "8ea042e1-06df-4415-8f1b-f3094deadfa1", "comment": "Malware payload (Adware.Generic)", "value": "17686b53ffe7877f44f9c67e3ae67a48", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421063, "uuid": "486f27d4-ec24-4dfd-b1f7-0c9fe53e7189", "comment": "Malware payload (Adware.Generic)", "value": "4e211e28170f2973eb4cc5b47061c369a2cd086e3790c4397640d9780903f3c5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421063, "uuid": "0b1dd3e6-29c5-425c-adfd-5936855c2d1f", "value": "T13E2633793291BBB3DE4098785F5DD4126E78E31DC9218F8F57B433E09E10A62E3889", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421063, "uuid": "5c80f1c2-0bc2-4a5e-aa6c-0de949663a70", "value": "3abe302b6d9a1256e6a915429af4ffd2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421063, "uuid": "2354451d-0cec-4818-aa7d-100a641a2169", "value": "98304:PkgxY3RfEgetBfPi9WGGako10rHp1VDqYhEnZJ0gbNhbdJXwWL/AaG55:PkHBfEgetBKcoP+rH3V6ZigbZ1wu/5Gz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746421063, "uuid": "373c350b-f071-406d-80e6-ddab8f9d820b", "value": 4813608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421063, "uuid": "1b9c0dcc-dacf-4311-bfd2-e5a56dd845cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "790b0875-225b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746421268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421268, "uuid": "1695e02d-e496-4e6d-a4b7-4f6993674b03", "comment": "Malware payload", "value": "3214e7da3a50b13260b5f9c24556ae46", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421268, "uuid": "1ef2f49e-de2f-462e-9dcf-644473dced5c", "comment": "Malware payload", "value": "e6bbc3fe61ccb51576d7786b8f5d68d3adf8355684a033bbb41d14a99ade5b56", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421268, "uuid": "88bb343f-2ef4-4afa-8226-8a4bd520dcd7", "value": "T175F533EC8EBE6AE9341CC7BC35B8534075A86C7A09DC48D16BBEC6071631AD5A7C23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421268, "uuid": "2551ff65-d120-43b7-a52e-51b856cc7423", "value": "98304:bD/5IVaPY06J3Rh3Vc4smM/THIVvcDUh6+8zgNmHaZ2FTi:P5IVaq3rVamM/jPzgU1Ti", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746421268, "uuid": "ddd452e9-87ac-4965-8478-8763f96e7c4e", "value": 3610344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421268, "uuid": "f836f6c2-9351-469b-bc1d-493805453b24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0943ef3f-2971-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746422591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422591, "uuid": "816673c2-51aa-4e65-8314-b75dc687dd87", "comment": "Malware payload (Mirai)", "value": "2a8f924a3d6168a1686b328923d45355", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422591, "uuid": "9f887e1d-0398-4ca8-93f5-210521c2f19e", "comment": "Malware payload (Mirai)", "value": "410d06ad4f739b360b1013ae816ac5450920e0b5376472cb88c13734a8379c50", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422591, "uuid": "b9cbc0d6-63ad-4ba0-b54b-aab0a338bfe5", "value": "T1BA53F807AD5082FEC048C5706B3B753AD42A72FD223CB6E637C5BB2B6D49E314E4A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422591, "uuid": "e3b0a63c-d19c-413d-8b79-f1adcfc55465", "value": "1536:VcCUDpjc+wiDl2QlrRaBssPnvmtTnGsb92zW3OGJsJMG:CCUFjxwiZ2QdRa6sP+dnf2zWeosJM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746422591, "uuid": "28acd0b9-4b16-42a5-b022-c1035ed86197", "value": 62720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422591, "uuid": "55159b21-0b4e-4104-ac15-3f97a0c6b931", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c448dc0-2974-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424072, "uuid": "0afb249d-e4f8-435a-ae56-4cd3f68fb902", "comment": "Malware payload (ConnectWise)", "value": "2a7c9b53413f02ef207189af0b727e4b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424072, "uuid": "b35e0320-d3f1-45a1-8f26-d2cadbdc49a1", "comment": "Malware payload (ConnectWise)", "value": "b695ea86cef5e953a3bb4cf3d3d22a5b4d5ddde2e4aa6319e080b22fa2524824", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424072, "uuid": "dfcb06ff-cf02-4653-8f65-ac3b956fb3f7", "value": "T1A2834B53B5E18475E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424072, "uuid": "225c991b-1756-4eec-9fb4-7ca44e2d8099", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424072, "uuid": "db5d01d7-2e7f-45ed-b0b4-b6f2addf790a", "value": "1536:LoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYM7EH:q9q8tC0C+axfdalBqRfbYRGYYYMk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424072, "uuid": "a0ad86ea-6b5e-4360-80f3-78d94ff0ea3e", "value": 84264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424072, "uuid": "beac2142-f6fd-4772-a13d-2349a7843e9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e1eed3-2975-11f0-82df-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1746424330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424330, "uuid": "91c2e84f-fb51-434d-9e0a-9915c153debb", "comment": "Malware payload (Blackmoon)", "value": "f6693c8cfc6a7bc8f62dcad4d5066209", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424330, "uuid": "0eb3fa0c-ef57-4c8d-ba6d-f544a2a28b71", "comment": "Malware payload (Blackmoon)", "value": "6162e3d2404569dedde958dd4b19824d68b54e9587a64db63e81c8dc2a4f552e", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424330, "uuid": "9a483393-8698-4e92-83c8-4914d27c8842", "value": "T16E76333393A9118DE0C6CD3A8A377EE271F2176A9F42BC76599A6CC234111E5F312E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424330, "uuid": "47c60ac4-c40f-40c4-8daf-94656c1fc6ca", "value": "dd814857cbab25725de9608b8188fe54", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424330, "uuid": "dd8bc708-c172-410d-9c3f-373edf70bfe7", "value": "196608:NxNWdoLRRtGFSRbdtzY/jW1Vgk7WthatQeQZ:6QRYg5ljckCst6Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424330, "uuid": "ebc6539e-1781-4e2b-a3ed-fe150cada694", "value": 7778304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424330, "uuid": "71f28516-d446-4407-8e52-dc81bb86318c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ccb2554-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "5396e8e4-6dd9-4560-8212-44ae4a1f1385", "comment": "Malware payload (ConnectWise)", "value": "b0b74d40ef1511f0a035297af5c124cb", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "cec18f0a-5562-49fb-9daa-76616176aa11", "comment": "Malware payload (ConnectWise)", "value": "2f650647d7a49fc45683cc943d420e8ac4166128d020beb2d9d58b0b398e5d09", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "45f74077-f04e-44ed-9ea5-e702f0276252", "value": "T1DC836B43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "73b94c51-92f7-4bfc-8e4c-f76085a0322c", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "08f98462-266f-466f-b6e4-e54eba40410f", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYd7zJ4:DenkyfPAwiMq0RqRfbaWZJYYdZ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "782b5441-b3d8-47c7-9fe7-a8f2f2f03f4a", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "20170d79-bb91-4e71-95c9-e46323aa1cfb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf669e6-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "60e1cf7b-ba3f-46f5-86ad-aebe4a9c52b3", "comment": "Malware payload (ConnectWise)", "value": "5c7ca95e9609d1d846e4eb2f25096eef", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "0e90aefa-e182-4dd7-a4cb-b60b0353800a", "comment": "Malware payload (ConnectWise)", "value": "d258474a5b51d193995875fe7b404a9c0c492a480e7ba235a5b576a319224b74", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "1f184cac-f462-43b8-99fa-9f6fc44f40d1", "value": "T1E5836C43B5D18876E9720E3118B1D9B4593F7E110EA48EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "3b595f1a-0c28-4664-a334-4f39dd65270b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "de682459-baec-43ae-ba2e-b79e44c29a56", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYs7LJu:7enkyfPAwiMq0RqRfbaWZJYYshu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "a62abafa-f483-4196-9111-e22bf79fabe5", "value": 83200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "d70a6c92-2776-4b2c-a2c9-e8fe8baf8f41", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cfa2a6d-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "1ac229b3-d439-450b-9024-009c7d1b1c3c", "comment": "Malware payload (ConnectWise)", "value": "02a024728de9f15ce7097853239c4a0f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "897747ca-da2e-40f0-a46a-acfa9e0b5799", "comment": "Malware payload (ConnectWise)", "value": "bb408b8e27ab854eedebb3b7ffc90cac15dcebe2c41ae58e7d589f4ec7693f14", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "c7f77508-4519-4787-8a04-8676e748dc85", "value": "T1F3835B53B5E18476E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "68413dbc-422f-4aae-bc9e-ff6f598a2aac", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "aef595a6-bab4-4b53-a6d2-ec3f10940eb0", "value": "1536:roFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYp7kp:K9q8tC0C+axfdalBqRfbYRGYYYp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "1efe6514-5f3b-41ce-9e66-321dae9369a9", "value": 84232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "75576722-32cb-4e90-8434-e5c0dcae1949", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d1b13e1-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "984da691-d2b0-4805-8c7a-20e50e1d995d", "comment": "Malware payload (ConnectWise)", "value": "0e8643192897611b741eaa32dd8fd8a4", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "8ab85ae2-2b84-47f5-898c-8e42a96018e1", "comment": "Malware payload (ConnectWise)", "value": "537efa92a16cdfbbf0bd8905d5943be1f663973c20ab623f0a56fc63f71319cd", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "c2ebf334-b53a-41ef-ae07-2bfa964379b2", "value": "T111647C11B9C48432C273383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "4f1b3cc3-57bf-4fc9-a0f1-3a752a05c761", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "5383f8fb-0796-4bf4-bbdc-cc5ed7adb6ff", "value": "6144:9mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9V:41iw7gryNkSV1hy1Z1u2JLu9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "653010d8-08aa-443f-98ea-ed0da9a498b3", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "46f00aab-7be3-4155-a461-a6ef4870a0e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d1b220d-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "df73ff5f-8c93-4c54-bc5c-f48307041c58", "comment": "Malware payload (ConnectWise)", "value": "2e0b6de4299cd88940130eea56a693d8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "b608c445-2e15-4476-a31e-9abfc92e8248", "comment": "Malware payload (ConnectWise)", "value": "2ee4c2967fe69a8b5f4367bc2003f8227757e469ebc827cdf780d79983123576", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "6d2e4518-3df9-4a7a-ad02-22da615264d1", "value": "T140647C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "b135fced-d8d0-4811-b7a8-b9a8fd5634cd", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "3cfef83f-98d0-4cce-a095-b41613e39f5a", "value": "6144:NmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:o1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "39aee63d-4dcd-4701-9450-3995113688a4", "value": 312584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "452aedf9-64cf-42d7-a24c-5e827bdbeb66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d1b4f49-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "63c7108e-a96b-4771-9b90-806abc2f3e04", "comment": "Malware payload (ConnectWise)", "value": "9ff1103d1567652bcd275b69c5e2cfca", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "ba21a357-6956-44f0-9b4f-78ef2b948c51", "comment": "Malware payload (ConnectWise)", "value": "4ce8775f023ae168f2f062c3a66bc8ba6e4a52a0da59ed50d7474a2eb9bc2bd5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "14264504-9ce0-4e70-b39c-1511c7686045", "value": "T14D646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "353e412d-2451-4a06-8033-1e7304e00726", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "aa8c3178-24b6-4df1-b1bb-52e741e4da95", "value": "6144:emlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9h:V1iw7gryNkSV1hy1Z1u2JLO9h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "e04110eb-411f-45dc-b628-a405ac1d5f56", "value": 312592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "600bba38-6e0f-4244-bb27-de1246c361f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d229247-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "10e1dd51-c9f2-4e5c-9c48-36b7af4e23b5", "comment": "Malware payload (ConnectWise)", "value": "42d9845fd12c4a8229110b95b01a025e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "ac6cfe0a-5a6b-4f60-8aa4-6429d8ce0dfe", "comment": "Malware payload (ConnectWise)", "value": "11f0e7862f109a2a5f166959dfa31034d17df960fd588bdcbc6acd2af17949f0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "af7ff399-2fbd-4c6a-8c2f-9c94b0bd95b4", "value": "T1D8646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "9432400a-370b-4625-a7d8-0080739611aa", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "95eace90-c1ab-46ca-8520-77c55df1cf1e", "value": "6144:tmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9z:I1iw7gryNkSV1hy1Z1u2JLu9z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "55dffc51-f2a9-4739-a9fe-13615ba5c3f4", "value": 312616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "ad2a5627-2d62-4033-a891-0c3e409b7764", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d33d125-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "425b8200-9295-4b44-9813-9e9921d8f7dd", "comment": "Malware payload (ConnectWise)", "value": "92583fe8378aee719bb655d890928128", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "a06fad96-7493-4fd6-8066-8956b0eabda4", "comment": "Malware payload (ConnectWise)", "value": "2a952a1dd33384d8a47d6a087c4069ebecaa6eefb5bdc9e4a47a3c4f93565cc4", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "d5bf3639-b391-4fc1-a195-66f2378023a7", "value": "T1ED646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "1ae4637c-268e-4b97-ba31-ae1ce1e44c20", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "c6755a09-db50-4d0a-a9e8-a778f8c73515", "value": "6144:lmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9A:Q1iw7gryNkSV1hy1Z1u2JLu9A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424986, "uuid": "57e624cb-b688-46d3-ab85-13fe54aa83c5", "value": 312592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424986, "uuid": "8479e306-d284-4411-bec4-68a9b7f9b1be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d48ab5a-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "1f864670-3d12-4743-8496-573dc86eba11", "comment": "Malware payload (ConnectWise)", "value": "0a28b603609fe5ac2694c9001943a58a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "f78f86c5-2708-4bdc-b596-f2245d5e8ce3", "comment": "Malware payload (ConnectWise)", "value": "9b3aeed041eef43b2821b7ec5ee918d70a1137d70b4be6c015c73836046c738d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "1374108d-40bf-43e9-bac4-6b5e819a5222", "value": "T19F646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "4b766f81-8885-4d8a-8202-a5598784320e", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "2667ba65-cf8c-426b-a45e-bcc3bc681217", "value": "6144:6mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9rZ:J1iw7gryNkSV1hy1Z1u2JLu9rZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424987, "uuid": "d1782e79-1d06-4e53-bd6b-4e2ecbcbcfaf", "value": 312568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "f03a8329-c306-4bca-baa5-bc9914218b9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d4cd1fa-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "7380e1ff-667f-4fda-9ac4-d179b042a53d", "comment": "Malware payload (ConnectWise)", "value": "2cab8b6fd90c96d466bd13dbeb125c13", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "adf55ecc-7b0d-494f-8740-ec24a58c32a4", "comment": "Malware payload (ConnectWise)", "value": "1eb9c4b1183f355bb453237abeafeb8791f349f3e926d4c784f087255648c42a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "f1e07609-52f2-4997-9735-73484b87ed3c", "value": "T122646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "107d85a9-8b24-4c0a-a40f-454a873403b5", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "21628bf3-9932-40d5-8d06-ffd1dd4d6e22", "value": "6144:lmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:Q1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424987, "uuid": "cf75259d-26f7-4276-9f82-47508760fa6a", "value": 312592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "770d54f1-184b-4c4f-955d-58e05b0e35d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d596e82-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "9a305a21-eca7-4d99-9e52-d31721c52e6f", "comment": "Malware payload (ConnectWise)", "value": "f2cec0cd9c84bda2491d6aa726de2c8e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "2db4c71a-abff-4db1-832e-ba090ff330e3", "comment": "Malware payload (ConnectWise)", "value": "7c31af18d4ee730ec468d8b83ade54c5d9b54e49077449b326018b7cf5bbae31", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "11bf6dc2-2d13-45c0-89df-5a27f09759af", "value": "T11A836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "e8117450-8bc4-4560-8516-4a3c09ff9fc7", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "3e8ce5e9-d137-4137-8945-5d70b9bce643", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJne:DenkyfPAwiMq0RqRfbaWZJYYJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424987, "uuid": "8838b7db-6e7c-4a9a-a5d2-5e36b03ec9fb", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424987, "uuid": "a756087c-662b-4309-ac15-ee4d5b306ac6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f5ae273-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424990, "uuid": "f600641a-ea9d-4374-b624-17ae69f53b35", "comment": "Malware payload (ConnectWise)", "value": "cbe6c74c70d1c6a18b7f4ff39a9af657", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424990, "uuid": "0b7657f6-7568-4d85-a2bb-c08d82f58541", "comment": "Malware payload (ConnectWise)", "value": "676aa7864edc74a33b0e4c46d56cac1eadbe6ba5c63dffbcd081743618eb6d09", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424990, "uuid": "29b53172-fa74-4fe5-84f2-4718c6bda11a", "value": "T10B646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424990, "uuid": "00a478cf-daae-4fb0-afab-552a4315f226", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424990, "uuid": "ddb1a699-69de-4c31-b778-57e0b3dcdbf4", "value": "6144:VmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:g1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424990, "uuid": "d715540b-6d32-4beb-bdaa-e073fe0b8ee0", "value": 312608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424990, "uuid": "060f2f41-fa84-4434-85ff-e2e2a4d61bcb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fc8a9da-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424991, "uuid": "b6e18090-440b-480e-b46a-538c201ffb92", "comment": "Malware payload (ConnectWise)", "value": "f67b8bebd1e5536c096c6c27dcf75e96", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424991, "uuid": "137d7233-813f-48d5-8a86-0e3c98334769", "comment": "Malware payload (ConnectWise)", "value": "6b9665d7c812302bf81c3ea65512dc45db63cb5243de91656b0e892f22880e98", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424991, "uuid": "f9369919-7829-4759-978e-c1423cfb9b49", "value": "T130646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424991, "uuid": "7cc939e8-f844-4e73-b297-4a34a5b08ea7", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424991, "uuid": "725be062-042f-4aa5-bcd4-64bbd9f27839", "value": "6144:tmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9l:I1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424991, "uuid": "8be0de7c-cb3f-4393-a1dd-ec6a34070726", "value": 312616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424991, "uuid": "ee631ff0-f764-4624-9a8f-f370d87d8dee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c6aacd-2976-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746424994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424994, "uuid": "542eea31-e374-48ec-b21f-4d35fa357a88", "comment": "Malware payload (ConnectWise)", "value": "eed08c8432f76243e61add5da4b44356", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424994, "uuid": "7364563f-3868-4211-aaac-c9bcf02a9af6", "comment": "Malware payload (ConnectWise)", "value": "6caa8e8fd6f6eb28cc0c64ea1004bcd31aa284d81716f0bc7f5619c513d4d7fb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424994, "uuid": "e42f4943-5851-4342-92c6-f11e9682219d", "value": "T1BD647D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424994, "uuid": "12672020-8f5a-456c-913b-9f35ff7f7583", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424994, "uuid": "84defed9-57b7-45e1-bdaa-03939bc4f5e3", "value": "6144:NmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9M:o1iw7gryNkSV1hy1Z1u2JLu9M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746424994, "uuid": "528a9ef0-c105-4ef2-803a-70c4b7a4b1ca", "value": 312584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424994, "uuid": "73d0af29-e58a-4797-bbd8-480a66720ca7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b17e12b4-2977-11f0-82df-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1746425450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425450, "uuid": "43a694aa-51cc-4111-ad4f-638cf90e9232", "comment": "Malware payload (Blackmoon)", "value": "365dbd98a5de3dde408a3ead125c0676", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425450, "uuid": "729df9c4-ea4e-4f80-8cee-317d42627724", "comment": "Malware payload (Blackmoon)", "value": "5617b9fd65348f4f537c395a0304d86b05695e2209ceb6c712e0f4c313ec042e", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425450, "uuid": "6a751f8f-8bed-4aea-b46b-2163ce14c586", "value": "T1F4C312046F8B97B3E1CB2379B54043D1712A7D61D0CEE187FA2A52DD4481B6EFA832", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425450, "uuid": "191d8347-b5a8-48ff-b7ed-4540a8b806d1", "value": "8378c1e8455f3a2c07ac8b6c8932363b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425450, "uuid": "97c38bd7-1912-4829-8f54-fa29a918da38", "value": "3072:hdjlyd6STjiOHkau6ysPHa5/NlofuLPk2KylhdJOY/Icq/m:xyd6SJbZyIa5/7iYPkVylBapm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746425450, "uuid": "86ba4587-3cd6-423d-814b-81eadd7e5e08", "value": 123392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425450, "uuid": "3803f497-558d-4e49-bc61-96b536a896d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f745059e-2978-11f0-82df-82aee05be84a", "comment": "Malware payload (GuLoader)", "timestamp": 1746425996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425996, "uuid": "2219def8-9b04-4e88-918d-8584b2a629f4", "comment": "Malware payload (GuLoader)", "value": "5c1df65b9cdcd5165e2294b136267a51", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425996, "uuid": "af835a5f-080d-4618-af57-53840fef79ac", "comment": "Malware payload (GuLoader)", "value": "be2a0ac12548e4cefcbdfccab1558d2712087496bbc6fc00db5e85913fec93fa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425996, "uuid": "ad3a3d73-a889-41f4-94f2-02cbe488f869", "value": "T14D5633C5FEB3EC59D0BA1A7069697A3469D5CC1C600CEAF19B00F541B2BB2C9BB185", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425996, "uuid": "3d04f267-6bf8-4f6d-986b-fcc64967f10c", "value": "671f2a1f8aee14d336bab98fea93d734", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425996, "uuid": "cc4401a1-3c2c-4c38-8645-48127fceded2", "value": "98304:aJLIALuuxBx/19t+xznOywv+r4oYIxns2e56SM2F9jE37HethOKtxC6xMHKqHHDx:aKgxTo5ngve4lIbe5UM9jq7uhObUMHnV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746425996, "uuid": "309d87f9-1f5b-4847-bca5-1e646a84143c", "value": 6020133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425996, "uuid": "11b52156-5e6d-47a0-b523-d15c127ae191", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e3fd4dc-297a-11f0-82df-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1746426518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426518, "uuid": "352069d9-b9af-4b95-8000-968979afc9a6", "comment": "Malware payload (RedLineStealer)", "value": "943e245465e77938e086630eb80e8f10", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426518, "uuid": "e367451d-9c52-4385-aa14-4c5fe04ef3d0", "comment": "Malware payload (RedLineStealer)", "value": "a6ca1dbbaa20c1de555513e2dffe668e96c4d32f043763c33bf4fe21dd9d36c7", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426518, "uuid": "d86c7692-0d1f-4bdd-a855-b527fec206ef", "value": "T10D663335D046C673CAE26AB156E28F1B11B8F07F0FCED1D3EB84296ACF36180A4555", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426518, "uuid": "d62ee8ff-b923-4f0c-bee0-fba71027b78c", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426518, "uuid": "5efafbee-c6c2-4de6-a87b-60c19b68538a", "value": "196608:p9/jkRXZWG9K1NbaK3ETQ2+RmSGGvoHBA:rxNlJrbvMA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746426518, "uuid": "4d070dc3-c1cb-4576-883e-ac44869410ec", "value": 6621696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426518, "uuid": "92791171-78c6-4468-87e9-5a864763c0d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746427532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427532, "uuid": "8ce6c40e-bdea-47d6-8138-0e8db1f747c4", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427532, "uuid": "292f20ea-f04b-4403-9eb0-2ef9b6719de3", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427532, "uuid": "0e764927-85da-44c1-8fa7-83bcfa00b269", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427532, "uuid": "56e5288d-e1ef-46f5-b825-cf3561eb569c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746427532, "uuid": "608a704f-fc10-4206-8dad-71cd7fd1154b", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4285981a-2980-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746429129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429129, "uuid": "96dc6f90-8b04-4729-a84c-55a4645cff9f", "comment": "Malware payload", "value": "fbd75915e0dfaa77a5a5842675ecde23", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429129, "uuid": "52c4e92e-bc4b-432b-9373-6840e5895fe9", "comment": "Malware payload", "value": "fc2268268c6d226d2c751e2de3bf7c0af5f4241dbfa015fb094ccb9bfe9827d4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746429129, "uuid": "a6b31c4c-e251-4a5c-879c-6143783299fb", "value": "T12534F0A1345978CF5A22C20913DFB362DF6B1EA05F676978F03CE80C5B612A5BB15C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746429129, "uuid": "8d91c678-9ab8-4e6e-8602-c62dfeff53db", "value": "6144:xKBslenfZxM1qlqEZlSNAUcfr75k78AVWSPh2TZa/n9hUV+:xxlxMlqwdjlUGchrbU4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746429129, "uuid": "ca195b7f-67a2-41f5-9bff-4adcff7f5989", "value": 247878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746429129, "uuid": "156cb058-f864-4dc7-a7d6-d1beb482e349", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f95a5d9-2928-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1746430025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430025, "uuid": "6bc898e5-68e2-48c2-8dab-3a009cc0b18a", "comment": "Malware payload (LummaStealer)", "value": "1d44889e79b4bf313b32a1fead4dbd59", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430025, "uuid": "54f660d4-6f84-4df8-a6c5-304d9879f361", "comment": "Malware payload (LummaStealer)", "value": "5dfece6290f3a263441adfd6ab92d01278e85166e47a2003c350a144dc407d05", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430025, "uuid": "d7db09be-49e8-4e33-bf57-cada3eeb504b", "value": "T13AC4150A3ECCBC10DED01DF40D165DA2E62FF8C6F77501A6E26A6E56482D664EFE02", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430025, "uuid": "8755020c-dfba-4f67-b070-44e3bf358fe1", "value": "5185d670db9ed76e6347f9c08f625076", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430025, "uuid": "adb3a899-9455-4d37-b669-f968f1cd0892", "value": "12288:N12RmHS74eZq0bgPVeZi4gbvnLARc6L2DqmVfW4cyNBJXNXXHXXXXFXXXXGXXXXk:N12R8GZqWgPVoi4SvLT6yfX3PJXNXXHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746430025, "uuid": "828d07f7-af2c-4d5c-a4d7-a839a2a2f9a0", "value": 589824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430025, "uuid": "5db8a721-64f7-40ea-b0ce-b7411d5bcc62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58c2d65d-2982-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746430026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430026, "uuid": "0423e069-4fe6-4bc3-ad0d-599ae4f83bdf", "comment": "Malware payload", "value": "d5917ace3b2e23da72f034508fda7f2c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430026, "uuid": "583fcf32-7828-404d-b107-2e3eaea77b67", "comment": "Malware payload", "value": "99d733984003fda3fb1103767a3759ac70df56c037f3ffca9fff17e90b238d00", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430026, "uuid": "42e18dc0-72a2-4252-ae99-ebba23fa8f2d", "value": "T11D02BF2BC95FA778103A84E9D67A06784023A2A9372CD07FDE2613D1DFDD4606504C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430026, "uuid": "0241626a-023f-43a5-83a2-3088f1bb315d", "value": "192:oMVst+N4vYYgurOFYwYjGJHNHYQ5cq4V3OT2sB0PMlN:M+N4LJI9YjGTHYQ54Ve2ZPMlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746430026, "uuid": "22429eac-d03a-46c9-98f2-bc6e7a5d5873", "value": 8960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430026, "uuid": "27ad8183-46d3-4322-b6a7-79b24e7ec12b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c0c914f-2982-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746430031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430031, "uuid": "cdb0bf6f-f881-46a9-b2c1-25e20df3134d", "comment": "Malware payload", "value": "23576c32ea5c1925c8a6bfecbe3d6f0a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430031, "uuid": "e1cd3adb-0bce-46e9-9e80-e6a6e973f555", "comment": "Malware payload", "value": "8a191f6fe99beb784be59410d10d13d13bc1930fb9959b03ff0a7d0539d007bc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430031, "uuid": "a28e01be-de05-4a86-880e-0fca5a1cc5e0", "value": "T11222BFF1122663DC990545EFE14E47A31C1FEAA183586244F9E8DB4A040FA9DAFFF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430031, "uuid": "e6f1ed34-af14-439d-b58d-a69866de76fd", "value": "192:nf9EfwLr7erOSk20wMpkDbc+06ATJ3yHDiSB/WaplSVnhw8YYH:nhL2rOF2+pkXcvbTJCHDi0JSVnhUYH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746430031, "uuid": "de703fde-cd80-4a84-9650-d65bfdbf0b3a", "value": 10496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430031, "uuid": "c4ed39cd-cd85-41a5-a253-21e8885c4d80", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52da6703-2984-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746430875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430875, "uuid": "5398897f-f98d-4e7f-ae01-c8260d24da0a", "comment": "Malware payload", "value": "524c230c35680e65208c085bebb89198", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430875, "uuid": "af8f01e5-3028-4f7a-9605-b7ac68715174", "comment": "Malware payload", "value": "4c695912da83721cc1729d8db544ed03df954042a43bca022966df52977a4630", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430875, "uuid": "66f9d79e-d0f0-4073-9300-27d136a6251d", "value": "T16433982568F5163715D285A03AA02F9BAF92EA2BD92F161573FC0FC65FD3E42CD032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430875, "uuid": "0e1bc1b8-a782-4118-bce4-bd1e53c95a17", "value": "768:LtrUz5AdZ+8kckOk7khUCUaU0UFXX8YZ8/mUZs:JUdAd7HjKC3pncVRU6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746430875, "uuid": "c37f520b-3951-421e-94a3-3e6800e15950", "value": 51685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430875, "uuid": "2ffa0117-6c8d-4cee-92a0-4bf3ffc7401f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be6c60bc-2986-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746431914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431914, "uuid": "0239d79a-2b6b-4876-bbde-f9f77cfbd943", "comment": "Malware payload", "value": "fecafed6855fab97919072a4a788676a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431914, "uuid": "77579771-456c-4e10-ab93-da5f62daf1b2", "comment": "Malware payload", "value": "6c3eae49088e310b8e3c03009508246f06dc93e39efbff5ab678f0ccdff99f51", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746431914, "uuid": "b35fc7f7-29a9-4269-a262-52a9a800c5e7", "value": "T179F62322C19D132BC70F6E3461DA112EBD5EA625739569C73FF09648BDE16CD0BABE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746431914, "uuid": "03d89b85-2640-4b42-a45e-f61efd1ff250", "value": "393216:8ZSmHh44wPmjRU0hIgBahCChdV1YCpZinCwICa:8ouibIBhXBahC2gCp8C4a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746431914, "uuid": "bcb62598-6b46-4ed6-b1d3-e24eda6621ea", "value": 15637986, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746431914, "uuid": "d99310bc-e525-4c1a-bc4e-11b084518081", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f01f8f63-298a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746433715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433715, "uuid": "2a28b6a6-c8b1-4276-8b8a-029bff00e8c5", "comment": "Malware payload", "value": "a97ec2de66e24ceb3e151acea2fb13af", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433715, "uuid": "369306a8-e8d3-483d-bd2d-5eb765499ae9", "comment": "Malware payload", "value": "076856199c4408cdac45014cf8064f10f629835288a628a51286f4e169e3b712", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433715, "uuid": "944a4a39-7050-4308-b0df-ee1d07f86865", "value": "T18C8633E574CF81A5D4FA8A34A5AA459806073F9C267971CDF32E3DA974370C4A8CF3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433715, "uuid": "4c4c0d20-1a86-4c31-8b63-d73e810869eb", "value": "2fb819a19fe4dee5c03e8c6a79342f79", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433715, "uuid": "d2accbb5-7d0f-4d18-94ac-045d05859665", "value": "196608:yYf8Yv5jYSiKFF5FFFVpsjCmIAfueALD4YELgGKCBycgB3mN:yYf75jwK39FzYI1eAL+k5rcgB3mN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746433715, "uuid": "17199c90-985d-4d98-8ef5-67fc374da074", "value": 8013693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433715, "uuid": "03cc5899-3550-4e47-ae50-66af671b557c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06ceaaeb-298b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746433753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433753, "uuid": "417eb748-b141-49d4-ab67-70d4306d3bcb", "comment": "Malware payload", "value": "2aec969d23cc015ba528a8de85fb379d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433753, "uuid": "0a4efb4d-5af3-458c-8b7b-fb623c1e466d", "comment": "Malware payload", "value": "81c220dd84c19889ccbb4550624abf25dce0ef50710b92e2aae9d0db4f1edb55", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433753, "uuid": "c491c3ea-60b4-4811-97e7-cd120e0de5b7", "value": "T136259257E6B691E4D8B6D0389662722BBC713859833897D79B809B074B71FF0E93E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433753, "uuid": "e7abee60-7fe7-4cac-a09b-ae359997f407", "value": "e84d11c378c8e8f83080cc0f510539d2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433753, "uuid": "f54dcd1f-f8e4-4285-bbf2-a7a1710bea66", "value": "12288:3EUEK/alBxScnB04n9Cf8gzLRrtB25JsGW2EEYGVp3Am:GK/alBxFB0FUgzLRrtUJFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746433753, "uuid": "796f082d-eb56-4eca-8b2f-dea7af84ba7d", "value": 1021952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433753, "uuid": "9993346e-de82-4cce-a76b-dc7df589372b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b32503-298b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746433992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433992, "uuid": "122d3df2-861c-42a3-a277-fa7f70b74eb7", "comment": "Malware payload", "value": "e95a7a5b39e11889c5858a1f20538c1a", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433992, "uuid": "3c56ea86-d509-47be-8828-b764f4e056c9", "comment": "Malware payload", "value": "7ec49fa16751f2165c3b0cfa85b67089efcb5884054aeb76d7165b616c43bdc4", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433992, "uuid": "7896c31f-b6c9-4369-9056-4eca615bdbb5", "value": "T10D462CF3520ABC9A1F7A0C48D0013E101C59B84F53B693D8BF4E97D9A1EA258DE789", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433992, "uuid": "6b18914f-2a79-45bc-9d39-4d3d0cefb7a1", "value": "49152:/SmPeYvxnsEif0MOUbu+r4C80B4EgEngr4OVPkCrvOhu0r0:/NeUngf0bEuc4nX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746433992, "uuid": "c3e554b3-b107-4422-8d5c-70a2cec5fdb6", "value": 5406336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433992, "uuid": "410e45da-141c-40c0-9c7c-36df46154786", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aec0f509-2993-11f0-82df-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1746437471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437471, "uuid": "61f51f29-3f95-49e9-8452-4292049fdd7f", "comment": "Malware payload (RedLineStealer)", "value": "f0fadfff272797aa73b447f112d94735", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437471, "uuid": "903d6662-1042-48a1-ba8c-7538f1db87ee", "comment": "Malware payload (RedLineStealer)", "value": "1e9af91f6e7bd941556df565299a09cac0c3ab54b45a3786b8e33706d96c3da3", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437471, "uuid": "36af4f46-1862-43bd-8da5-4c52978ac0f8", "value": "T1CC663301B7E0C0F3D87496BDD55AC24C6675BE858B72ADDB72AC32DA04942B946233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437471, "uuid": "da31d7d2-9d1f-4b58-b54a-bd1b46fe342d", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437471, "uuid": "26df54d0-b693-4894-b878-aedc79531403", "value": "98304:dakHLK1qzVVsFJOrHDUx9Q7SY3W2t7mNbfS8MJSO4/BVVIso1USykr5U179awnOW:dlK1q2ueQ7SY3P7mRVVVg1USykcpndl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746437471, "uuid": "17d04187-6ddd-4f5d-af32-f5d05358d244", "value": 6621184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437471, "uuid": "2163ec0a-005b-400f-9b03-6a141a6fdb2d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609411d1-2994-11f0-82df-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1746437770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437770, "uuid": "d3053098-370f-4ee5-b540-3be4ebcfff30", "comment": "Malware payload (GCleaner)", "value": "7837fdd84a7370d9d466f2dc04f7e959", "object_relation": "md5", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437770, "uuid": "d6ede71a-b584-4f30-8aba-c25a256a0d54", "comment": "Malware payload (GCleaner)", "value": "c9d9a3370d1189fa0bb4dce27e72f4c27033f05e668fb020b4cb9351a00010a2", "object_relation": "sha256", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437770, "uuid": "edb7b690-0850-4708-b695-4f670aa6999f", "value": "T1571633BA184341A5D0361E3E638BB0193615DF60D39FAFE2C99A8CD42B53CD62BE0D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437770, "uuid": "5d1906e0-76d4-438b-92f0-5a6e63c79518", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437770, "uuid": "b1cb1534-e37e-4bd9-87ea-f13f9d72d8d4", "value": "98304:tPGoJliMI3F5YuWkjLpqlgGtKuXdgFbZbGQw1E:teKli/5ekPsAu6zK1E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746437770, "uuid": "3a11b535-18df-4aaa-9930-3cc1b57b67a9", "value": 4350976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437770, "uuid": "baffd20d-a22e-40fe-a0bf-f7fdc1a10535", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b11341f-2364-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746438773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438773, "uuid": "c2a2b94f-74d0-4412-b5e7-0fed03e63f43", "comment": "Malware payload", "value": "3c347fbbb85992fceaae098811a2a7ae", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438773, "uuid": "4c642a26-5011-41f1-812e-ac96d95bcbdc", "comment": "Malware payload", "value": "a42062b7d8f2bfff08e9a72ab670373affb9f432014c1bd3cc623524478ce98a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438773, "uuid": "542c0e05-a300-428a-a6bd-a67d1a3e758b", "value": "T11C04D87BB785233518A39369364E36DD5228D130A276872038DFA12E275507CC7BBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438773, "uuid": "eaccac25-4145-4634-9b34-bba01c3ab0c5", "value": "1536:LNilj8EW4UV/39Iz117t8oxCLD7c/Avrk/2iYz117t8oxCHD7c/Avrk/2iWD7c/A:xilj8EgV/39uqwOqcN2qNqn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746438773, "uuid": "5ee33719-2bb6-4807-b76d-e4d264ce727b", "value": 189777, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438773, "uuid": "1d01efc0-13b9-48a0-956f-fc2eb653eee5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc7cf147-299c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746441360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746441360, "uuid": "e7a73744-d8ab-4451-9d5b-fc27ecd00903", "comment": "Malware payload", "value": "b1cf906941494f4e6050b2c73ef27314", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746441360, "uuid": "4ef29c57-193a-43b3-ba36-93437ebabcd8", "comment": "Malware payload", "value": "43379aff5a53efd0becc06ffd1ca8e1d10d1cfbdc6db87bf403797ea4af7de8e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746441360, "uuid": "ae15cc2d-9b34-464b-936a-9eab39b5b566", "value": "T12392D1388324BE1CC23A28EFCE7957F816653D27137785ED16465169E3FCD34A348A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746441360, "uuid": "b11a6bae-c23e-4734-825d-424d88788181", "value": "384:Koht/iwa8rZn5dhpbgDZAVauWizMkiSFVyi3BD9mdYGnT87GhYDPAdCZz9zrjz:KoyWlPhpeAVauWiZVFVy4MnZYDIdCZRn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746441360, "uuid": "03339dcb-50af-4c28-9f2e-9712a78b8e91", "value": 21248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746441360, "uuid": "3277f0ae-a0bc-4289-a033-3eaf359a5f93", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55694672-299e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746442046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442046, "uuid": "5c28efa9-f74e-4d89-86f1-5c5d0c09308a", "comment": "Malware payload", "value": "d45035ac5499c765b0f9e0cd2b93291e", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442046, "uuid": "fd7328a8-c327-4e14-8871-46dacd1843a5", "comment": "Malware payload", "value": "cc12cf01ad407b918cf60f1f677815de4e46945f8007fa3f2fb640b07f264ada", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442046, "uuid": "69e602f6-b37e-4b87-998c-34a169205b37", "value": "T184A633241FC80D2FDE5E45FEE49851DD46AACDADB94AE7DA181234EC4F372C439420", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442046, "uuid": "1b9d05da-1a82-40c1-96cc-74e3d2e63b85", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442046, "uuid": "656ab7a1-32e7-463e-beb3-657af76ccd43", "value": "196608:RGsc5tHH2eZFbxI0Ta2AGZieDUE4xnNRb8va06p6z+Xd3:tjerbhm2A6URUaZ6+X1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746442046, "uuid": "ef5451c3-e05d-4fd6-b13f-73f423f0ce0f", "value": 9936384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442046, "uuid": "c4b40336-bd0a-4112-8379-5c58a7639204", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5207d39f-29a2-11f0-82df-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1746443758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443758, "uuid": "1483aa2e-f58d-413f-8d94-9144725e0817", "comment": "Malware payload (Blackmoon)", "value": "72f064c3932f4839bfcbd9c5355d8a7b", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443758, "uuid": "54b9b74d-a1c3-4ce6-b5f9-e4339f6fc02f", "comment": "Malware payload (Blackmoon)", "value": "5c785a2d698aeaf1a606d6d5ff1d3360098c18b6c427d7fe9bf77e97612d3739", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443758, "uuid": "cd4f2c97-4e27-45e6-9b7e-28734e6ff017", "value": "T13EC312C56E523516F7D10372A10CF2C760AF3756E1DCF1CB6939B88A2C29B2460FEA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443758, "uuid": "042acbdb-b3b0-4e2a-b5b1-5ea313e255db", "value": "8378c1e8455f3a2c07ac8b6c8932363b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443758, "uuid": "42e1d606-71d1-4328-bfc1-aaeae6073566", "value": "3072:fpbpthbUqSgDKB4x1FBvIaWsINspaLDFa:PthY4KexXBgaZ7D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746443758, "uuid": "7b2a7a46-4c1e-4682-8adf-5ba3fd4b130a", "value": 123392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443758, "uuid": "720387c8-1ebc-42e1-b59c-bf1aeacbb0c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eaf78324-29a4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746444874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746444874, "uuid": "fc2cab7b-beb8-41ae-a7c8-368d31a0086e", "comment": "Malware payload", "value": "f27038fc3d4409e7cec86e7fabfa7170", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746444874, "uuid": "e6f2ec90-234f-4301-95b2-4ef606e38d80", "comment": "Malware payload", "value": "50a4a364df725c2a361a66ff1b01e4caac2209345a9eb8b5460d5f5734fdf306", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746444874, "uuid": "9e76306a-e3bd-4983-82d9-2109de9ec73b", "value": "T1BE8312914CBE2F629DB8D86ABE29230B3D573CE987CF564771E434A2C183E58BF500", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746444874, "uuid": "4ef7a80e-a8a5-440d-98f1-8993e4bf0b07", "value": "1536:6JFt9XCU+/Wzq41sgIu5oZk31nuuZ7YYVfH78j8+gd+0WdIpIGqgm6LNsb4JBw38:6V9SN/Wz1HDyZUuuWIAj8ndWdIUuJBwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746444874, "uuid": "1c2ffb7d-310c-4289-9b62-bac23cb5cbc9", "value": 86784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746444874, "uuid": "ae35a194-ea24-4327-8108-2af1b990e6ac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52a4c7d1-29a5-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1746445048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445048, "uuid": "25b2dfa4-9538-4dfa-a761-ac17c916bb35", "comment": "Malware payload (CoinMiner)", "value": "0000638ebbfe0d620abe6ca32abb1b58", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445048, "uuid": "139efb20-26b6-49b3-87f7-f33eaeabae36", "comment": "Malware payload (CoinMiner)", "value": "267ec6176c1111d9ffcf32fcfa6aa65917e64d1556dcbbd8989ee6bbebc2e72f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445048, "uuid": "8a9d7ff9-906c-4626-aefb-030adcd190c8", "value": "T1BEC533D84252EAFAC49395BB30294C64E9FBBC4103E162DF1FE103B31DA16E49E3A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445048, "uuid": "35a759cf-8acb-4427-aec7-774de949c669", "value": "de41d4e0545d977de6ca665131bb479a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445048, "uuid": "f197028e-6ba2-4f6d-a926-6826fe5352e5", "value": "49152:eYArhqi2aYBhDkVfe1YoJbgwIdg6QYF6CV3QR3SBlXVx+1Fhiu+v:eYqhqi2awBbhQdp36kQRiBz+U3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746445048, "uuid": "528e4675-359f-4148-a3ba-64c2fd7cfd26", "value": 2621440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445048, "uuid": "bca45a5c-484d-4660-96cc-5103d76d4381", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "124f8763-29a7-11f0-82df-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1746445799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445799, "uuid": "9af5fd48-c9a3-4413-ac3c-bba99445751a", "comment": "Malware payload (CoinMiner)", "value": "8cc0e158c7814f38aa7dcce43e4b5d26", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445799, "uuid": "5f0a3952-15ba-4d17-917b-e74def47ffd0", "comment": "Malware payload (CoinMiner)", "value": "90766ad30dff5ae4857baa08ecc6bbc137fe1409234444ad8383e2742d60950f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445799, "uuid": "2d1f0549-d62d-456b-9839-6da14a95d690", "value": "T12B832A01F590A07FF9EA81FAD2F64A69582CFF74134948E39290256BD7242FEBC750", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445799, "uuid": "eafb5490-44d7-4849-8ed9-f72834e13cc8", "value": "8d83a073848641257ffcc6771c22bee0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445799, "uuid": "e9391740-9406-4a19-849b-0dc418a7f0e4", "value": "1536:2nlZChFmav82Sd1P6MBr5xDRBj26z6mBmND:OzvOKd1P6CxDXK6WVND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746445799, "uuid": "68cb01ff-e5d4-4e6c-ae73-8272e33a5939", "value": 86528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445799, "uuid": "0c6c1a5f-bcd2-44ad-84d2-87cfcf128382", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82d824f6-29a7-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746445987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445987, "uuid": "a90264ee-b22b-4104-8b7d-660af9f2c903", "comment": "Malware payload", "value": "486640bf6fd8044ab912024fd2b90544", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445987, "uuid": "d3d0fc3a-57ec-4b7b-a260-c634c7ab3004", "comment": "Malware payload", "value": "9ff24c464780feb6425d0ab1f30a74401e228b9ad570bb25698e31b4b313a4f4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445987, "uuid": "1dd08d27-01d9-4fbd-b00f-ad87c72778a6", "value": "T19D941217898E5D8EE0A7C386B729556C03CDB153A1C564B338BC0E9A5B45F9EFC2B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445987, "uuid": "09dfaf83-defa-4ebb-ba97-64a379d8452a", "value": "12288:n85BAG6mhOfvSp8NuE7kZPVzNMrYECoHDtLIIujwJxwTg2Uq:n85emB8NWdzNMrz9FIpjw3wxR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746445987, "uuid": "6164b1a6-c9b6-41e6-93d7-55bc8e67a18d", "value": 416308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445987, "uuid": "e4fda863-f211-4e97-aa9d-0278ad55c9f3", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1b0cdc2-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746446549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446549, "uuid": "474628e6-6acb-498b-a453-64dbd5efacd5", "comment": "Malware payload", "value": "740f1a5a5ae2e3e33b3991f0932f8bdb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446549, "uuid": "b3a80099-cad9-4cca-a801-cab17855b45c", "comment": "Malware payload", "value": "27e4939eaf928b68bdd096ac4a0ccb0f55cdd636aa901f35a8fdb55ea7c017c6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446549, "uuid": "473404de-dda1-4eef-b3e7-ae1ece4f4647", "value": "T11A1523EBD18506CDD4742F3880B3DC384573BEAC3829994DD9ACB92769736C22D2ED", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446549, "uuid": "f28b3396-cf0a-4113-a2ba-9f2868216f28", "value": "4db47062180d52dd06f8c279cad4c4b4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446549, "uuid": "5f935278-a20b-4f97-9ff9-da5fc2f8529b", "value": "24576:fmYWdgDedSimd+AQR7vMkIGVJ3VLDkRSQ:fmdqYSiNLQGVJ39m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746446549, "uuid": "9eb03288-10b1-457d-9c48-0515a9cdef54", "value": 954368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446549, "uuid": "7c2a0f63-9801-486d-aeac-4782c532f912", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6301ea38-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746446755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446755, "uuid": "08422fa1-fb70-4be4-b396-0619b1a1d383", "comment": "Malware payload", "value": "5ea20b711ab324a56951df8dbf501703", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446755, "uuid": "b6308bef-5b20-489c-9b67-ed2b019b91b0", "comment": "Malware payload", "value": "9bcbb326a28b09faeb6fbfc0e7d68fe6ff79b7248c7b2510aa8dd11cc55e0356", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446755, "uuid": "833fe4ee-c613-4f6c-a818-07464595abe5", "value": "081302D0122127C89361DA3938BE702B8438662F32F929403DA7A14EF54B71658B7EBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446755, "uuid": "1fd783ed-520e-49bf-9fe7-c950f8a9f1b3", "value": "768:/kAKuobq1rduMGAXSEYEYv6DjbChaAUKvNvy0OQT23MTGU1DkI:87vbq1lGAXSEYQjbChaAU2yU23M51Df", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746446755, "uuid": "a8d4c027-f0b7-4e20-8b4b-a82f380825b1", "value": 45260, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eac2ca11-29aa-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746447450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746447450, "uuid": "852ccf78-3181-4412-b433-e9d03fdecd54", "comment": "Malware payload", "value": "54cf0a4b951d644dd95035dabb375390", "object_relation": "md5", "Tag": [ { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746447450, "uuid": "f7b4313a-fddf-4253-b39f-ab1fef2ebd15", "comment": "Malware payload", "value": "7a806dc9e790df186b4d4df3e4da23e6a91099d22feffdd2f35c1ccf4a52cee4", "object_relation": "sha256", "Tag": [ { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746447450, "uuid": "4284937d-9f16-4996-9daf-dcc603510365", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746447450, "uuid": "c46dcc97-02ac-4870-9451-c1674e6450e6", "value": "3:6ekff:6Ff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746447450, "uuid": "ceff6823-6242-4ec5-b4d9-179e4b457e72", "value": 204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746447450, "uuid": "1b01f5df-3679-4eab-b24c-249b3ef7f4b4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3df904f7-23a3-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746448982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746448982, "uuid": "a369e65f-a065-4358-8964-853fc55d5fed", "comment": "Malware payload", "value": "54090c99666ae6f9990db1a752b2a60b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746448982, "uuid": "8586d846-53af-43d3-a7ed-8cf4e52c7975", "comment": "Malware payload", "value": "5bf97079b93db376edc6a49ecad68ca58874b37c86c6accc09baefef533a7dca", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746448982, "uuid": "0736fbd9-c874-4a59-a56b-0b3b57b9d8a2", "value": "T1B104C67BB78A233518E39395360E35DD6229D030A276876078CFA12D275506CC7BBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746448982, "uuid": "5c7f94fc-1da5-4470-adaf-07213e42741b", "value": "3072:xUNAD6b5tYM7NADdb5tYMub5tYMCNADvNADR:qOD6HYmODdHYjHYNODvODR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746448982, "uuid": "e4971120-ccea-49d2-b08e-056b8f8d5dff", "value": 173615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746448982, "uuid": "4c99fdce-0f95-4b79-aa0c-4baf5bfc52a9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e0c118-29b1-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746450321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450321, "uuid": "34c76dbb-4f9e-44d2-851f-12d1837359cd", "comment": "Malware payload (Mirai)", "value": "93326a650ce772fecad53c89925a0769", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450321, "uuid": "76308347-4ced-45d3-bdda-cb032d788308", "comment": "Malware payload (Mirai)", "value": "92275b97d8bd4f6f9ad3363fa53c2b62e953506dc78596e09090d2f94363a88d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450321, "uuid": "9655724f-8001-48d0-a713-6793a99aac00", "value": "T161137D7BE4AE5E54D0460230B4689E341F13F5C493536EF71EAA82A15487AECF905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450321, "uuid": "d9e9130d-3337-4af6-beee-2a6041fa512b", "value": "768:WaRH4ge4hYyFDinQT3yMILrzCideITC3o9C7N8C/ww:WaRYghh/FmnQyMiqid9Tf9e8C/x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746450321, "uuid": "eb67e564-b41f-4fed-8288-5d92b5312da7", "value": 41980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450321, "uuid": "c97b8563-9941-4a52-93b7-5532ae29a5fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "204d7bb8-29b4-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746451406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451406, "uuid": "8b1c1887-10ee-4e62-bf20-c0fe3cfc93ee", "comment": "Malware payload (Mirai)", "value": "9d7f218f6e54cab620ec06f2202fcad7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451406, "uuid": "2149fdf9-1ac1-4cae-812a-3b8548771c00", "comment": "Malware payload (Mirai)", "value": "5c279f4fc7c31f9c35ab244de3d2841b610d24b88286a6b28760a313ec093627", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451406, "uuid": "c37e3f84-da67-430e-adac-79031b481d29", "value": "T1D123E807F54380FDC09AC274066BB93EAC2675FE1238F2B67BD4A7226CD5E225D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451406, "uuid": "9496cb71-f83c-41b9-af36-37f3ea7df628", "value": "768:vZCLNaOGW6bQHT9XmB3OIB/c1cV9KFf8D+wdYFmuqpjikQ5jvI04Wx2fEj1s/KhN:oLYOGW6bq5XmB3OIB/c1cvK++JMBFUIT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746451406, "uuid": "115e2def-b683-4359-a3fa-6e3696ad9aab", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451406, "uuid": "eadc5da5-5f8e-4bb1-aa33-95b7805f033d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a35e9160-29b4-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746451626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451626, "uuid": "350f0586-362b-447d-b7b9-ed635c03e161", "comment": "Malware payload (Mirai)", "value": "6f201b7f56765644fd89df5c8cf6de85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451626, "uuid": "45c2d582-e5b2-4f6d-b953-5b211ab24daf", "comment": "Malware payload (Mirai)", "value": "6f6b15d1480dcd4eb3339bfe5210a58694433f7d62fa38b4d4ab729810ec301b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451626, "uuid": "938ee2bb-a1c9-4252-878c-b8c45dbbcb89", "value": "T103231841B8818613C6E4137AB66E46CE3B2563E8E2DFB3179D221F503B9682F0C63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451626, "uuid": "8fc6f4ca-ae5f-4e6f-b1f2-c9936888c06a", "value": "768:hRT38FvJsOvEZU3JyvqKVtn9K6/8axU/PoV1K3/N+WzHn533LEw:P38Fv+Ovo089wl/V3XBh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746451626, "uuid": "2637c995-eae4-4044-a3f3-29dab3c6696a", "value": 46868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451626, "uuid": "9d7700e5-4d00-44b1-86a8-8b7ead6296f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb170968-29b5-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746452122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452122, "uuid": "39b36e90-64f0-42b3-a85e-5d813d7f789f", "comment": "Malware payload (Mirai)", "value": "a2bcca13172bebcc406b680faa957036", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452122, "uuid": "4d887aa6-e76d-4d34-b1f3-e2a0555c00ba", "comment": "Malware payload (Mirai)", "value": "9f8d153c1085b0e95550fc4e5565253c5e67ec00787ba1e8361ee9509c689e23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452122, "uuid": "4f6d9c34-00bf-496a-860d-f7a79bbbe1f0", "value": "T1FD03D651F8825A27C2E1127AB6BE4A8E372073E982CFB617D9214B103BD551F0D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452122, "uuid": "952c1a00-c534-47f8-8ff8-29deff622f04", "value": "768:RqILBdhxPh9NeftcG5dm80LyFBWEu/tOr4MkKvlw9QSo8qMyfE1JomcI2/Nkw3kE:k0z+f2G5dmSBWjV8kZbJqK1x2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452122, "uuid": "00b24564-55a7-4050-9e82-6fedb5787575", "value": 38116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452122, "uuid": "ddf2e95c-f006-4fcf-9ba7-d32ed385f334", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8231618e-2383-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746452306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452306, "uuid": "b281178f-31ed-4881-b0f9-e6bf9d35b300", "comment": "Malware payload", "value": "3aa561f05a13da90a794cce8eaba6ac0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452306, "uuid": "dab09db1-34cf-4716-bb52-e3a2f37e7de1", "comment": "Malware payload", "value": "b191b6e98c69c8ac4ba62c9e85de24886ccf89b0d93ad185420ed4682c2b4288", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452306, "uuid": "fe2dac3d-fed5-445b-9cdb-1a735ac6d1cb", "value": "T16614A36BB786333514E39259324E35DD6224D030A276C76078DFA12D279906CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452306, "uuid": "467c6a64-548b-4b3d-8ce6-266460c97e62", "value": "3072:xE/yza6rWKBkYN7Hhm9/kYN7HhX9p9nkYN7HhwkYN7Hh1:9kiHY/kiHz7nkiH6kiHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452306, "uuid": "f9130bfb-ede3-48c7-aa5f-8dde7a575271", "value": 198335, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452306, "uuid": "959120fb-f7cc-4962-b532-b53b2c2264eb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74a56094-29b6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746452406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452406, "uuid": "7ed78de3-2788-4993-a043-aa195eaedf94", "comment": "Malware payload", "value": "bda0cfbca5776001dffefc5d1a7d076e", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452406, "uuid": "f5c8a561-6e22-4178-bebe-17e62119521e", "comment": "Malware payload", "value": "f85307eb5d4d571bd9acc7e64e788fe923788d4acc716f788bb69a042cb747e9", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452406, "uuid": "d62e6f53-e740-49a5-9cac-8e9f42d9f8c9", "value": "T1F13413A6ED82D4E1EF87B4476E09A0B63020951E3B251B1C4B53079B25E94FC1D6EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452406, "uuid": "a1b4de04-70cc-42b8-a98a-e1e35e6bc420", "value": "6144:4ShTdcPYqwrp6fNZTOxZWeeoVDZm4+/rTyiGckH:4SYPTypCDeeojO/rTyitkH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452406, "uuid": "d8e8244f-261f-4eb2-b09b-a34c58568602", "value": 245824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452406, "uuid": "0ac6ab63-70e6-4f90-abd7-9bfb34b151b5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77f06160-29b6-11f0-82df-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1746452412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452412, "uuid": "7ccdc977-92b5-4981-9d5d-8172021ffc41", "comment": "Malware payload (AgentTesla)", "value": "9d0bbca570cd3df2eca4b90f99d753ce", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452412, "uuid": "e70be170-54f3-41e4-ac7f-c34c71b243c1", "comment": "Malware payload (AgentTesla)", "value": "0a091cea875d91e8766116a6381df6cf14a5f4af249c5df4d1dd4d80b022ee9b", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452412, "uuid": "4b995f3e-135b-41d4-972e-01506817729d", "value": "T11814F1C837D19F73C6568F79992B23DD2728D3207282F78BA8D4053A7D863CE1E909", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452412, "uuid": "de2f7913-eae8-4361-be65-00d12b016ca8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452412, "uuid": "9b3ddf1b-0db1-4613-baf6-f7068263ea07", "value": "3072:eVGcFkWyspvQGkQZH1S6oZepYa5DA9BnHHznDhd0XsdM5IpO3xel7whjnUPDhWLr:e1khspLkaH1meaASBnHHpm8W9wwq8hh2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452412, "uuid": "370df6a7-f27b-4b50-bed4-712da69b428f", "value": 193536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452412, "uuid": "a882e904-eb35-40da-99e7-311c75add6bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89ee545b-29b6-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746452442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452442, "uuid": "c6ddc757-0116-4dbf-855e-9eecdb6c8caa", "comment": "Malware payload (Mirai)", "value": "6f26b20c6eee68c75d971b7d191c8af0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452442, "uuid": "f2b7ce03-9edd-4e75-869f-a373e09345ac", "comment": "Malware payload (Mirai)", "value": "5bff4752abdac6c880f69b0dea9524a66be68e4d8208109c3e090d441f1af7c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452442, "uuid": "74fdb538-b5e4-4196-b7ae-c876d2eb39f6", "value": "T12853AFA5C1F8AE98D6558174B204C9395323A408B5AB3EFADA47C795900BEECF05C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452442, "uuid": "9e383310-6529-493b-b2d6-81960e190a85", "value": "1536:AajZBaHf/Vc/tiZYAubjxk+zzLQs3ijD3a5DRtWXC5:AUZBgf9cMQhzQ+iv3WRtWX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452442, "uuid": "55424033-15fc-47df-8585-7fd7d7c2fe5a", "value": 66548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452442, "uuid": "2c5ff218-426b-459b-a9cf-c7d50d6c20af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3289a1-29b6-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746452608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452608, "uuid": "0401c1dc-ac27-4eee-ae9e-412fe74f02b5", "comment": "Malware payload (Mirai)", "value": "d82409d4959bea7e0902ecd082b562c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452608, "uuid": "00e6f36f-fbe2-48a8-9f57-3d6743ce389b", "comment": "Malware payload (Mirai)", "value": "c558a9e31dabfb66b6676d5cd7680f879cd6343aa11d0c670c253c96a1bd6906", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452608, "uuid": "4d8b26cd-e98a-4767-8d6c-c57d53d308c4", "value": "T1D4E2E13497B6A6A285341938E4269E80FE950BBDD2FEB17127494F5C6AD20C211E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452608, "uuid": "b6d67ccc-0c8e-4713-b4e5-4515d19f5f96", "value": "768:j8KkL9AQ2W+G8kqUv3OCtPszf5ihN3AuBy9q3UELil:CX2JGrx9GmQu1LQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452608, "uuid": "591165e3-8271-4ed0-be21-6d7422bd1059", "value": 33788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452608, "uuid": "cf7f2c04-d00e-41db-90d3-ca5178ea4537", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f73fd987-29b6-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746452625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452625, "uuid": "f8d94572-0bc6-4e84-a3c8-86ae5a0cc280", "comment": "Malware payload (Mirai)", "value": "5ccf29c58d800a261db6835f74d0b8fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452625, "uuid": "534dcb8e-2301-4a2d-8a7b-02f422acbcea", "comment": "Malware payload (Mirai)", "value": "e6e152a2b6a4340c3fae92c7d5bb8d5b810fd6e78e7bbdf60416cd63a3ac12b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452625, "uuid": "c10b16e3-4b5c-4c2c-aac2-1460da135f68", "value": "T18DC2E038E1106EC6EFFA7EF2BB95E2C433702AD973B79DB533409645DA02B2243514", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452625, "uuid": "0b88fd06-3024-4a47-88ae-3a5c0fccd9b9", "value": "768:Y1QHATS6SqEvzYyT0xW5vFi2wlbjvqakBB5pg3QhCY4uVcqgw09hc:YdTSV7LSDNqakP574Y4u+qgw09S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746452625, "uuid": "1312c463-3220-41fb-826c-bf5e59d7e9df", "value": 27772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452625, "uuid": "15d68f63-0535-4d5c-9c11-c30cec8540a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5706114a-29b8-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746453215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453215, "uuid": "cd73011a-2b0e-4795-8833-b8608f4849ef", "comment": "Malware payload (Mirai)", "value": "8caebe8e4d99d103468a58325b6a4412", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453215, "uuid": "df1989ff-6062-4067-b461-824e48ba1f5e", "comment": "Malware payload (Mirai)", "value": "e121a45917efef1db26574a56df57ced4880696c92d0c5230984407338e6eb63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453215, "uuid": "45e4b49c-8b96-4c3b-8f4d-2fe9124daa4e", "value": "T108734A24A9792F12C0D4A17A22F78321F2E5331E25B0975E7D720F9FFF14680A9572", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453215, "uuid": "7a5e0e74-1f0c-41b7-a381-5afdbbc5e603", "value": "1536:q2CLHtg5USumKJrq/HHPQuCcf1X4ednuvAvuTY1EcPvjF:tCTS28CcmIvuc1rnZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746453215, "uuid": "4bce1120-528f-4a2e-9a87-d6cd673c7483", "value": 76992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453215, "uuid": "bd2615c2-b1b1-4f5e-afb8-b7e2310e5f74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67e9c0ed-29b9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746453673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453673, "uuid": "33c62929-8ce7-4d48-9605-fcf7e42f8f8f", "comment": "Malware payload (Mirai)", "value": "ccf24f8f9da9280e22c56f57854f1e15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453673, "uuid": "8ff5a0ba-def3-4733-9db5-c2e52083801c", "comment": "Malware payload (Mirai)", "value": "8b397cff54aca2970385847fa0356add7e6daeb67f28e706213d5e575bf8f93a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453673, "uuid": "7cb981e9-e697-4cca-83ff-e5dd80ce7540", "value": "T13FD2F2C2006B01E2F677473BE805BAA301D8E6662416F75D59D7C400C75EAF8BEF96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453673, "uuid": "bfbe0409-1bee-4de2-8354-5834c61d1500", "value": "768:InU96vd14I0z0nxEwACoLitrejBu+5RwekHEYff:mUMdOI04x5AFLAwRTYn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746453673, "uuid": "1f4ad8c2-9975-4342-8188-feaf27c0be9b", "value": 30196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453673, "uuid": "f50ffaa5-6cdb-4802-9c30-b54393d2854b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9767deb7-29b9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746453753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453753, "uuid": "fd70847a-c467-4fef-b0e4-25937e057d19", "comment": "Malware payload (Mirai)", "value": "24bc53fe1446f5b3daebf66f0d1a1f95", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453753, "uuid": "cb0a2834-0504-4c95-baf5-fcf1e4a328ac", "comment": "Malware payload (Mirai)", "value": "11307d83209bca0e6faa99051785a69b08369c33603fcaf9f8e2603c37146612", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453753, "uuid": "adebd4d5-b275-4a71-b205-e84f262a7380", "value": "T1DA43851E6D168FBCFB59863447B78E219A5833D627D1D642E16CDA002EA034E741FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453753, "uuid": "0adfc83a-1ea4-4c1a-a1d8-e6addaf4515b", "value": "768:bvaLxUxyQpPT5rhmurrFtSmSnoh2Lt3ug+31IZi0e4fyMnup//dujgtywQz:bvJFP1PtkF+31t0lk16gtLk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746453753, "uuid": "85f1ca28-783b-4827-b62c-0a8ce0d36547", "value": 59768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453753, "uuid": "63648ec6-7704-49be-ab10-86f795edd85e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "020f5805-29ba-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746453932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453932, "uuid": "0d792f41-8c4b-4005-9197-ae9715b87eef", "comment": "Malware payload (Mirai)", "value": "da7aa24b5a68603f6d03ad3dec1dca52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453932, "uuid": "eaef5669-036e-48c5-b8da-66f14d9fd3df", "comment": "Malware payload (Mirai)", "value": "3ef290b04b455d200f0c7dd722fbf375565da97807007b5c624d68732db94395", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453932, "uuid": "f3ae74c8-58f4-4fe7-b459-a3a45545f536", "value": "T12E634BD9E442AD7DFC8BE6BE81114E0AB821623450630F27E6ABFCD37C721A4D946D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453932, "uuid": "958a04dc-85e9-43bc-ba7f-c4df9e0d38bf", "value": "1536:A9JbuhyZ6Ei6zI3iPSwqdNfQE/Fm2XsxUWK3o2J0U1qYadi8P:KRCc6PnThvUQRgYMz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746453932, "uuid": "d5ecd285-b4e4-44a1-b39d-740934ec9de8", "value": 69296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453932, "uuid": "64c6d248-d445-4620-9141-10d242d5b6f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f90bff-29bb-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746454360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454360, "uuid": "33db64a4-0b99-4a55-8340-0ac7b34d6882", "comment": "Malware payload (Mirai)", "value": "af721d894862c6c1114c12e7b9ae0cd3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454360, "uuid": "dc031049-5ec5-42c1-b377-d4b7120342d0", "comment": "Malware payload (Mirai)", "value": "029a1193c9da41da83c008d713466e1142d4766fd6d2c3f67abecbf6252eef15", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454360, "uuid": "c6894f76-4a55-42e4-b24d-ef008e1aaa44", "value": "T1D5D2F170079AC421C638DC7BC52D44237B973DF281FD7A3629917235726679670F62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454360, "uuid": "4bb2e066-3631-414b-b64b-d3e9da5e8ae3", "value": "768:1/DgKK4Hx+I1wc1qle2Lbzxkb7r/s3UozdX:15x+I1wcQle2LbkOzdX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746454360, "uuid": "21cf0663-49b5-4ac0-b651-c11622629ae2", "value": 28904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454360, "uuid": "e2edbb84-dceb-41aa-a4e1-1be223bf1b05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "309776ae-29bb-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1746454439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454439, "uuid": "f0c6f277-dd0c-4364-be31-09cc26f930c1", "comment": "Malware payload (LummaStealer)", "value": "c8e401d2007746a4c2420b40abc84148", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454439, "uuid": "fc191994-991b-4ec3-93dc-8d0e3daef915", "comment": "Malware payload (LummaStealer)", "value": "76d62d06e5e0c79ffdf1246a2aba19394e0d297a0a4fa8db4a375ec732f817e9", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454439, "uuid": "0766246b-00ae-4e28-9a52-3468067cb398", "value": "T1D4A52359F62FDC1ECEFA297E2A467D27DB63BBB105C160E02626DF0052364822FD60", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454439, "uuid": "31f230f1-2e4b-44d7-a515-0fa6924bf544", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454439, "uuid": "848851a6-92c7-428c-978f-f12c88e6f8cb", "value": "49152:oOgxW1SH6HPb76vcEyWKmNrWZzbCBvLR8C:oxxW1SavbAcE54ZXC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746454439, "uuid": "4f6d439f-3cdf-4b7e-af80-4a3949f7b095", "value": 2120704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454439, "uuid": "3a64d733-1acc-44e0-8842-541ecb6035f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51eadb71-29bb-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746454495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454495, "uuid": "4041d73e-6cf1-40f9-8962-f00582a29ee2", "comment": "Malware payload (Mirai)", "value": "e8f72cde9bde7ef4a848ea1761980445", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454495, "uuid": "6d8ec1e8-b918-42d4-b8fd-5d8c0a4b69b8", "comment": "Malware payload (Mirai)", "value": "c30a4fd2a4d30dd2a85af8c15754c5ede1a824b8dbe0254d6e4d5474cb4a060e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454495, "uuid": "15c27ac0-d0e4-4ae0-b45c-534410d3c695", "value": "T1351318C4F553D8F0EC5A06703076EB365E35F1FA222DE553D3A5DA72BC82602EA069", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454495, "uuid": "837ae193-014d-4dc6-93a4-25faca4638d9", "value": "768:xMlB2zs8ssGfrRI6aQ2nEenz0q8uDOycM3U95VlVs:YYzs8ssGfrRI6aVnEeYWOrMErVla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746454495, "uuid": "5d371007-cf02-458d-aa48-e106242ce133", "value": 41776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454495, "uuid": "0cb70fe4-5172-4292-89e3-719543a94cad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "002ab3ec-29bc-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746454788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454788, "uuid": "872cc621-9b61-4257-8bf5-6b248eb56211", "comment": "Malware payload (Mirai)", "value": "2a69d71643544ccdbbc5c6a84a2972b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454788, "uuid": "8b138bb7-9550-4f93-bd93-cf6ff0ed6cc4", "comment": "Malware payload (Mirai)", "value": "52f779ecb79d75e79c840a2c59d5883b35e6c4cee447b55b49526e82fe122131", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454788, "uuid": "2a4f4441-d420-4926-af01-367d0bad694f", "value": "T136D2E1B1FF77ABEAD9C90D34A958E03F60937C51E16A734983C4C04BAB95234E850E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454788, "uuid": "d776e7f4-2639-4e6a-916a-fdbde255b989", "value": "384:MCyDGAo4GMGE9dtdnjIALrulvMQ6LC/8JykpoD7/WO5QojpdH/vDUO3BbDHbEtHS:EDTGE939nLruHt/4uD7uOyeIeBX7n9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746454788, "uuid": "001da4ac-b1c1-4a64-8c27-d7471ba379e5", "value": 28804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454788, "uuid": "e80d66b0-9c7c-4f81-80e8-619054593a92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e9e77d3-29bc-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746454946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454946, "uuid": "c7e6621b-8115-4bf0-9dea-4b732fe8f779", "comment": "Malware payload", "value": "e968373970f2a4d204804bb0a1dc0374", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454946, "uuid": "db3c11fe-fb68-402b-9261-07384136878d", "comment": "Malware payload", "value": "cfeacfc0fed51f6df5d78e7d56199c0222dad6004f9996db25bc9fd6f4d2c357", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454946, "uuid": "68417f02-9b3a-4075-a207-a400e7547863", "value": "T16453F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454946, "uuid": "4f75c3d6-e9a1-4253-aa31-df0c2d3a11bf", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/d+MR1X1t1RB1p+dK2sA0:aA1fho1P6n24MR1X1t1RB1p+dX1i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746454946, "uuid": "042c728b-2347-44fc-a7ef-7fb29cac5403", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454946, "uuid": "2904e28a-6200-4fda-a1d1-8e66a32dca53", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990ef81c-29bc-11f0-82df-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1746455044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455044, "uuid": "d758b0c1-bf15-4d01-8a2d-10c183efdc65", "comment": "Malware payload (AsyncRAT)", "value": "43e82bcdf74a3ddc4fa270f52003646c", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455044, "uuid": "babfac90-d70f-4a1f-888f-cec8e0d1a206", "comment": "Malware payload (AsyncRAT)", "value": "dd8db8db97b2347fb5d250abec7ef56b87ac635f2e93546c2b6fabc2e4203e7e", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455044, "uuid": "a8176b52-e747-425b-be8f-79702bee5879", "value": "T133F6333150614033E3F606B7F924A7317CACE62C5B15C9A6EBDCAC9A1AB40E167FF1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455044, "uuid": "a9698f5f-0380-4aa9-a3a7-e44661a0f47c", "value": "d7e2fd259780271687ffca462b9e69b7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455044, "uuid": "78096f01-605c-4feb-a722-48279bbdba04", "value": "393216:sfJSqqTSZQjLTUi4XbEWtgaPOcdoKYBBFkLrJkw442MnpCDR91P:shqOuTU5XbEW2hvFkLymp8FP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455044, "uuid": "11cb618f-b346-4c69-b59e-2f055d05f0b2", "value": 15538704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455044, "uuid": "f7e7fa3f-e6a5-4000-aa7b-33e8d3a75628", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5d8d11f-2386-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746455088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455088, "uuid": "bb3ecf7e-fe7e-47a6-8a15-ec8be0be7bd2", "comment": "Malware payload", "value": "29ef6eb6a103a644067902fce2882225", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455088, "uuid": "2211b3af-c634-4d24-86fe-a9cc1a2ef8f9", "comment": "Malware payload", "value": "e556bad242dc0d4b497d66332a541c7fe9b27eaf7fc4dea0330b70f453351959", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455088, "uuid": "3b4ae595-3d6f-430c-b085-46fe80d7c02a", "value": "T13044B6BBB785233518E39255364E26DD6225D030A336876038DFA12D179906CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455088, "uuid": "24e2abcc-0bc3-4076-b1bf-36acb78bb55e", "value": "1536:LNlK9xC2qY5EpghHCg7y0kCnk3VY4l8bzEY/7CRyEpghHCg7y0kCnk39Y4l8bzEr:xA9+YGUyKOUyCMiUyPUyG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455088, "uuid": "bc113dc9-650b-46f7-9e99-923fb698c4d9", "value": 254039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455088, "uuid": "1625af70-7ec6-45e7-9e42-7b7b2e57ab23", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f3a8fea-29bd-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746455242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455242, "uuid": "64ca506c-eb42-4bfb-9450-d433f5c2f350", "comment": "Malware payload (Mirai)", "value": "cf319f6b27d5678b307dcb4c95f9c482", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455242, "uuid": "14ab39cb-5fbe-40bc-8549-2c5c2b589831", "comment": "Malware payload (Mirai)", "value": "952c4a054a4efd75cc6fb16ee0015c61005ec5beaf6158bf0fe4baee9eab43b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455242, "uuid": "c105fabb-67cf-4e3a-91bc-53c3b8278f61", "value": "T10D53B519BF610FB7EC6BCD3709A81B0538CC644A22A87B367934D468F60B25B59F3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455242, "uuid": "97c9acc2-b98f-4ba8-8358-5ff5b3181d06", "value": "768:iAVWeGUx4YGMmnwCw5BheiTebiQ2ZFVyXiSA7mWzkCw:iAVWds09wxjTIitZFVbmao", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455242, "uuid": "a36bde88-a0db-4fff-a0c9-6a9317b380e3", "value": 61080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455242, "uuid": "1269c812-ff34-4fa1-93a3-6be0026f70a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a36a6d5-29bd-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746455261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455261, "uuid": "04a51a4e-4e33-4c1e-aa19-aedc91b53b1d", "comment": "Malware payload", "value": "077723871aa1212769d8ed2babaa627a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455261, "uuid": "b63b862b-2442-4135-9dcd-6b0c14418796", "comment": "Malware payload", "value": "de7b5a91e65582503f8f4ad1a03671a61187faf5f4b4a7d2c348b43dab5433ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455261, "uuid": "e259573f-babe-4e34-81eb-fac50d5c111d", "value": "T19B2328AAF8028D7DF84BE77E54164E09B93163C152831B2A13B7FEA3BC731592D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455261, "uuid": "ccdd2bbd-2181-4e0e-925a-bdef1162e3bf", "value": "768:CK0eoVJdxD8xY2xXkCltdSxumlDx3MMYiP4Eq8DHwOGLJ:b0BD8xLVdSgm/3MMFP4X8DQLJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455261, "uuid": "97219180-1525-45ca-96fb-cccba15e889e", "value": 46676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455261, "uuid": "3652fa50-ab8c-4ebd-be6d-5978c79993ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28880311-29bd-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746455285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455285, "uuid": "124326f8-9403-47b9-a1c3-d2b3bfb268fb", "comment": "Malware payload (Mirai)", "value": "43d904a5c0b4a410b51f83d719405c34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455285, "uuid": "5457330b-b3c4-447b-9ae8-92e6b0026b65", "comment": "Malware payload (Mirai)", "value": "66379a88fb87bf7d23187ba8479f26322ff3e3547b3986d09ab8bffd2f1f064f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455285, "uuid": "3aa7cce0-80b5-465d-b61a-c4f1d81e8960", "value": "T1F143F855F8818B22C5D4027AF92D118E332367E8E3DFB2139E106F647B8696B0D37E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455285, "uuid": "01d28e18-fe3e-48b8-973b-25ef3eb9c089", "value": "1536:RJng2Ke3tTQZoSgLyUpja5X3ez7IMix3JihBJ:Y1edT+dCWn3JihBJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455285, "uuid": "f386bc8f-3578-4783-92cb-bf42e5988794", "value": 58676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455285, "uuid": "12d82123-2e0b-4c00-8300-ea85794354b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d68b5f10-29bd-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746455577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455577, "uuid": "03afcc61-1e02-403b-bff4-8a69f1024824", "comment": "Malware payload", "value": "07be72a576ccfb1d4c95ea2a78ab6f91", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455577, "uuid": "333c629b-c514-4a8b-8afa-db433a604556", "comment": "Malware payload", "value": "105fcd59e5c76ab1395fee68cc256cda8a12c5516718bbcf025fd69e0b71fde0", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455577, "uuid": "0caf2a6e-d07f-42f9-9af8-9534037b145f", "value": "T1DCC2EA77A1C0206A133A82DBEDAD377DD263F3D58314E44EA8D05D6D1B85FA394206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455577, "uuid": "9546cfa2-318c-4eb1-be56-f94c44bfa74b", "value": "768:vW3yGIOer6IwLEJHVkQceEfXa84zI723iuxCWjsRAzRXz/tHg:vfGI1mXYaQceEfXa70OiCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455577, "uuid": "7d3a5c1f-fea2-4ab9-b004-dcbb7e2d614d", "value": 26843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455577, "uuid": "153728e2-5e54-4f44-ab18-fb79a66959e1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7db9b17-29bd-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746455579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455579, "uuid": "5c9be108-ae4a-42f5-b112-dd162698680e", "comment": "Malware payload (Mirai)", "value": "3a4e3b0551a9c79fc6fc2d4be3e660ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455579, "uuid": "043ef653-358e-4215-b44b-cfe33c9d3cfd", "comment": "Malware payload (Mirai)", "value": "dcd812a25507f0684e70d3e0e7848ebf85d7d382223356a4f2d7f84f58f842a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455579, "uuid": "4b2a4529-269e-4463-8d1c-efdf7c40e060", "value": "T1D7D2E06342AFF5FBC45045321D499690FC73FC1359A513BF48E860BCAAE16A9B421F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455579, "uuid": "a45f50e5-44c7-4737-8036-7eed4296d4c8", "value": "768:YNM8w9BDbyQmksV8up1TwqGviqZDEdbx0Fd:Y0bGV7Q3FDuGd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455579, "uuid": "74e97a3c-eac9-41e0-b113-75158e8ba357", "value": 30076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455579, "uuid": "b3c11833-a1f7-46c8-9fae-c605d7977069", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069bdf94-29be-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746455657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455657, "uuid": "27a8cc3a-6672-432a-ba83-be84ac03b66d", "comment": "Malware payload", "value": "84e6dfd8d635d1684c2d1b9131cfe909", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455657, "uuid": "d97327da-e166-429f-9a61-dddd5e611d99", "comment": "Malware payload", "value": "e5116da076d5820c3109139174f2ff05139da7e06c075a22796f2648b12226c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455657, "uuid": "32cffb66-3e74-495a-b04d-b2cf557482c6", "value": "T102133C42721C0F17C4A35A70253F5BD087BEAAD032E4F285665F9BA68A75E371482F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455657, "uuid": "7b09cb07-3c27-4acf-9238-fcd4e3486106", "value": "768:U40J4bzio9RfQRW0qRGQ8Jt8h/VsBKltn2susfzFuMldW41LFfwW:P0JOC+Qqh/FxjMMlddLGW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746455657, "uuid": "eee77bfb-9d23-488d-99d7-731a376f3de4", "value": 43780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455657, "uuid": "e90505d9-fa29-41e6-bc38-5d35277ffbf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746457024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457024, "uuid": "86486844-26f6-4215-ae62-39bbf22d08c9", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457024, "uuid": "3ca820c0-d0a5-4e6c-bdc9-f46f6e35465f", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457024, "uuid": "e66fd46b-56f2-46d4-9df6-44678c0c293d", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457024, "uuid": "e9de0b07-7c0e-4d4a-9764-564f1aaf8fb6", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746457024, "uuid": "e41de492-d564-47d1-8296-c28121f137b6", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51415194-29c1-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746457071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457071, "uuid": "f528f5bb-4b26-4884-955f-a95d046a153b", "comment": "Malware payload (Mirai)", "value": "0e3af581cbb5ba4788361af794ee05e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457071, "uuid": "39c72d0b-4a8c-49ba-aac8-175374ba641f", "comment": "Malware payload (Mirai)", "value": "4113161815ea082e1fc4fd4ba2ca9b22e76ad969c49a160b9a573fb4d87e1a53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457071, "uuid": "f00ed23b-7dae-4121-8fe3-cbb21a20e6c0", "value": "T19733F2F5F30B69F25824D471E6EAC008AA16377DC46AB63F77341D592CB6A021E780", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457071, "uuid": "60a96107-99da-4ea4-b51b-f09fbece2363", "value": "1536:kEOojOen+dd+FqaMbv6Lu6VgKH0s+Js0pBD:Z3mraG6LjjHNeTBD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746457071, "uuid": "0e460398-7507-47cf-982d-ba35254f38eb", "value": 53284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457071, "uuid": "d0abfec1-ccd6-45d4-a636-8f562b78910b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e71bd3b-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746457442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457442, "uuid": "c9845bbc-0fd0-43c8-8c75-cc23cb2b818b", "comment": "Malware payload (Mirai)", "value": "8df9a71bc12288a35854f6fe7c2dc8f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457442, "uuid": "eacace20-f6ad-48ce-bcca-8de3311f73e9", "comment": "Malware payload (Mirai)", "value": "9f3155bea08d56448740c4777a9e83a10ee28f619e7e1c9175122e6422100f1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "d935bd47-d1ed-42a8-8606-d03996847158", "value": "T1A2C32B46E6818B13C4D61775B6EF42453323A79593DB73069928AFF43F827AF0E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "3791024d-d50e-4360-b3e7-db25122057ad", "value": "3072:5QK3qOAWqKUUoev+YPaOS6c2s+EuNM/9oE:5QK3NjUUoevbCOML+E4M/9oE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746457442, "uuid": "d61e80f7-0e9a-472f-b84b-04dd01d8605f", "value": 120446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "25cb0c60-e693-4de8-ae59-c35267c4a98c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0d89c93-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746457634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457634, "uuid": "ab666006-f3b7-4e89-92f4-aac6eab45759", "comment": "Malware payload", "value": "705e071f008e0a567d3badb004e6780b", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457634, "uuid": "37975b97-2dc6-4242-b9c8-a50f1b1f92eb", "comment": "Malware payload", "value": "f20363b73f36665e246aa5cc82fd467b7b564184824a06b0c16dafcb4382455e", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457634, "uuid": "0225c0fe-950b-40ea-8175-8780e2192a27", "value": "T157C2E977A1C0206A133A82DBEDAD3778D253F3D58214E84DADD44D6D1B85FA394206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457634, "uuid": "08db8931-4895-4771-b1be-9b36532b47c9", "value": "768:CdcxiR4pGunbGEIaVVwq5L4c8XE2niuxCWjsRAzRXz/tHg:DxiRU9bwqwq5L4c9siCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746457634, "uuid": "429d72ba-5edd-4baa-a880-ce01419c9878", "value": 26843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457634, "uuid": "24e029ff-5376-4191-a785-67cdfb34ec0c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1838e26-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746457662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457662, "uuid": "153a853c-161b-4fbe-a84a-57bf0a0c4198", "comment": "Malware payload (Mirai)", "value": "28fecf585e920233df9dae63ad0d9a4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457662, "uuid": "113a0a10-0e95-4645-bf2f-fd140494394c", "comment": "Malware payload (Mirai)", "value": "180e7aaf7f05b087dd343633aa2699a3b95fbf88522ea9d68580a2c5a2cfef9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457662, "uuid": "4970780d-ffe3-4151-9c97-77222dcbff5c", "value": "T115D2E1ECF774AA52CD6CCCB5E5981E391E68E1D83387075893628DC6F476593388D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457662, "uuid": "e03a738e-38cd-4b80-be97-80b343503953", "value": "384:A/FNvDbur7oTSly05yJYNOHtjR54PrdSbVQNC7BjVhafhpCOmhDkBYRWGVCz0NvZ:A/7DDMyxYrYbVQOEmh44WUp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746457662, "uuid": "5e61e574-cc04-4f28-b87a-42d572af0416", "value": 31092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457662, "uuid": "7f641605-d504-41bc-8342-b8c682d89a41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1432db25-29c3-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746457828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457828, "uuid": "09d0bc98-1bd7-404e-a5de-ed66d81ce826", "comment": "Malware payload (Mirai)", "value": "fae43ecd607eb4dd1d4b3daf254a02dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457828, "uuid": "f11f76ea-cb52-4bb3-96fa-f14ef2c5b77c", "comment": "Malware payload (Mirai)", "value": "1b76f5fe511b8dee8b8e08ea488e6155465a5cb39add59cf3e8e651bf4ae9552", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457828, "uuid": "36d9d06d-003d-483c-b092-b385ba056d9e", "value": "T191D2E0892317C9EADB0D893B8ED0035017148F6378479D01ABD0E9D6DF6B1D1B49E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457828, "uuid": "6b0daf3f-3f48-4641-922e-6fb7f38d68b6", "value": "768:WlhLmMIlSUx0E2qixTwOVieFHZHEay0JkRVJgGlzDpbuR1JhR:WbLe9nixUeF6atkhVJuTR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746457828, "uuid": "70d6b7aa-1738-47ba-8254-7bc454e7715a", "value": 30188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457828, "uuid": "4952c263-be7d-431a-9bac-d61bd92cd988", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da8d9269-cf4a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746458405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458405, "uuid": "eca69d03-57ab-459d-a114-d971b5e42497", "comment": "Malware payload (Mirai)", "value": "7608b24c8dcf3cd7253dbd5390df8b1f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458405, "uuid": "f0a1e34f-8402-4ee2-acaa-26d59143d449", "comment": "Malware payload (Mirai)", "value": "b4b411a4a713899565522f711036bb21c3925ee426162a870109794bb395b262", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458405, "uuid": "eb8bd91f-eb28-4349-a2aa-fcafa038e482", "value": "T151C485365FB2AB5FF278463185F63BF0C72A238726A25645D26DCA1C9E7411C1CAFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458405, "uuid": "c849454c-0f9e-4a44-93f8-53a1f9a9e818", "value": "6144:fVtnY9ZnvrRTDRIqK4ibEzllfawaetdCw5wB3SKsV7qFHk8agm+39KO85WT73ZwO:alDRIqKiT5ww+NKODbBcByD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746458405, "uuid": "ee2404d9-345b-4d40-b8ad-a74fba54b86e", "value": 544328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458405, "uuid": "8a2ccdc0-250f-457a-a1c6-ff32af87fe0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdf4c1d5-cf4a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746458405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458405, "uuid": "cee659a9-81af-453b-9c8f-683630d47588", "comment": "Malware payload (Mirai)", "value": "3a620ff356686b461e0e1a12535bea24", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458405, "uuid": "9a8c2865-4e5d-4f99-b77b-d4b31cc5f18c", "comment": "Malware payload (Mirai)", "value": "a430ed516a8a596570bc3a496b99cf6c7dd0a69ae0614ab2d2de6e9a8a6c2fc8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458405, "uuid": "5d581ade-f4ba-42f6-927a-6ee4842d165a", "value": "T1B3D462EDABA12EBFD81EDE3200650682144C429A13D66B7FA5B6C518F78FD0F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458405, "uuid": "2a43ced9-cb05-4bd1-9300-940adba6a7c8", "value": "6144:Px603RYIUg4fisEb+bua9vRdM+RRVdp/kzEd/EudQMxsuOfzmJ/0j+etz5bHZ:Px6DTOs79TRdAEhEU5NYzKI+etZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746458405, "uuid": "c774d21e-2b08-4b57-8c15-d486f28ce2ab", "value": 610960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458405, "uuid": "f0be9cb5-856b-4f39-8b34-2e099dcb96ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dac364f3-cf4a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746458406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458406, "uuid": "9bfd5140-dab4-436a-992d-eff11a19ed26", "comment": "Malware payload (Mirai)", "value": "5c322610e1845d0be9ccfc8a8b6a4c4f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458406, "uuid": "c0cf8400-eb38-4de9-8b67-90abadfbc686", "comment": "Malware payload (Mirai)", "value": "1138aaff88a60f99f80f3ae2cbb8447125f9904785c47c662266ddfd5f3916ed", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458406, "uuid": "185a7710-66f4-4068-ab49-1d19c0709bd2", "value": "T19BC45FEEA7A12EBFE86E9E3201654582144C428A12D71B7FE1F6C518F78F90F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458406, "uuid": "881b1295-9301-4b96-a405-f30f58a12fc2", "value": "6144:O/nsi54s/8sSIbbHBtwjWqkVJh9heL8w0SXIPesuqv5bYB:anrzEIwjEhk0qpNX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746458406, "uuid": "c75fc577-ff83-4a3d-a5fd-7dca08fbc97f", "value": 543944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458406, "uuid": "49069667-7ce9-45ab-8617-874e5f4cb321", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0014a30b-cf4b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746458465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458465, "uuid": "56e9d3ce-9b67-4079-a827-8b96d673e95e", "comment": "Malware payload (Mirai)", "value": "5ae1fec20c2f720269c2dc94732187e8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458465, "uuid": "214880eb-fb90-47fa-803c-0d0225d7fc24", "comment": "Malware payload (Mirai)", "value": "41f7ed67877a3d6805d60ad5ea91816f2092012fa316f9fbf1b8fbb953fbada5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458465, "uuid": "7c2feabb-1d0f-4b07-94fa-87767629f997", "value": "T165D4A6366FB1AB5EE279473186F73AF0C36623C226A19541D27DC6189E7021D0CDFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458465, "uuid": "f3ab68ec-79b8-4476-9333-8ea3ae23591b", "value": "6144:7J17kAqmRpuBYXZP3qWI5kaiLCZGNuWequsVOqS5Pxvr3+3awRV4v51u/HLGqeiH:P/pu+P/NuSSf+KwRAp8o8dskv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746458465, "uuid": "bead047e-489d-427e-8c01-c638af484440", "value": 610960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458465, "uuid": "eddcb460-3dac-414c-9649-9ee8beb465c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "814b4836-29c5-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746458870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458870, "uuid": "dc1ca4b4-f23f-41d4-b1d7-af429550a159", "comment": "Malware payload (Mirai)", "value": "b34d05ccbdb89e76098c630779a71fa3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458870, "uuid": "4e37c9f7-ec6b-47f7-af85-e5526eccea98", "comment": "Malware payload (Mirai)", "value": "5b735289f2cb3a772aade1d19cc53ac822497a6adeeed13f32f65e321af732fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458870, "uuid": "0323c508-4b6e-4793-b397-271b9deb45b6", "value": "T145243B09DA509B67C1E33BBBF79B428A33234754A7D7331945286BF03BC2B9D5E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458870, "uuid": "5c78620c-b847-45a0-93f5-4aa23c9b0747", "value": "6144:SgVPeaiqUyiu/Xb+stcUXbk/CDt+M/9Jc7mr2nBPNg2:DPeaiaiu/Xb+eLX4/KP/imr2nBPNg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746458870, "uuid": "1674f199-b5b7-4ccf-a94c-40633f640d35", "value": 211148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458870, "uuid": "a8d2dc49-b326-46e9-8f1a-f43b018e566d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ad6ac69-29c6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746459235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459235, "uuid": "cff72ca8-bc72-46a6-af8c-cef3b9522f33", "comment": "Malware payload", "value": "ad31f8d26a8bd99b5dea91ea33be77b4", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459235, "uuid": "f71427de-5094-40a1-a520-4dc22cd7f9df", "comment": "Malware payload", "value": "8306c7ed522d0e92cf3d4696f84de1ad7dffc0c9044bab522d7e8c6579a0203f", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459235, "uuid": "94143dc9-62ef-4112-b5e8-eadc63afee75", "value": "T10C673317F7CBE13EE01E4B3B4262A25541FBAA6655267E1282FCB4ACCF710601D3E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459235, "uuid": "ba1a6319-880d-4505-b74d-75e5056e86d9", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459235, "uuid": "4c87650f-9e21-49c3-bfcc-a3e88a386196", "value": "786432:ikvJzrCJqYkXVZxNSkIDZsHSxunp7Z0hQdddP2epWT2:3vJzr0xKV/MkIDZsyxunNmabdP2xy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746459235, "uuid": "addd51eb-8483-456a-b1cb-392001d2dd8c", "value": 31546988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459235, "uuid": "95d26e11-0a55-4679-911c-74c10a490edc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3a9f313-29c6-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746459464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459464, "uuid": "0db2e6c0-1d2b-4025-b35b-d9b2e2c4ddae", "comment": "Malware payload (Mirai)", "value": "e3c29ab7e639ce8d991a222f87fdb5a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459464, "uuid": "64430ce9-dc05-4843-9abd-47168bacf290", "comment": "Malware payload (Mirai)", "value": "af9ffeb5447b6d7982a82fca7122fe9310e1d2d2966f60efcad6641214e36023", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459464, "uuid": "65d0734f-f6bb-4e62-8c32-88d30cdf1e1f", "value": "T10904B51ABB619EB7DC6FCD3302EA4602108CD54A06D92F6F72B4D658E78B94F09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459464, "uuid": "5622cfdf-29d7-4183-9768-02cd3e10c85d", "value": "3072:wn9nas2b8/C7RurN6SpBPuvGFHgSLER9JteI:MB2b8SRQcSpBPuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746459464, "uuid": "26fd21a2-732d-4b9b-a7c0-37bd55504b44", "value": 188019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459464, "uuid": "f24b9be4-2b40-419f-a1a6-f1095edc9444", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11dc6b5f-29c8-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746459971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459971, "uuid": "68ed60c3-2590-4559-9518-2be080870c87", "comment": "Malware payload", "value": "19bb8ea2dcc63c5948da2be02c732d79", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "pig butch", "colour": "#913b0c", "exportable": true, "hide_tag": false }, { "name": "pig butchering", "colour": "#f69f1f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459971, "uuid": "e57ab3d7-3dbb-4ba3-a57c-6ff58273d56f", "comment": "Malware payload", "value": "86892e152942b5ec7a5cb60ecfec334cb49a52fc3e0a19fa23879723dc9aa2e4", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "pig butch", "colour": "#913b0c", "exportable": true, "hide_tag": false }, { "name": "pig butchering", "colour": "#f69f1f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459971, "uuid": "5290ffe8-b228-4fe4-960a-e723c88fae90", "value": "T153B5E087F719A42FC577C1334ABA073252874D0A8993DB875968B21C5DB7AC04F99F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459971, "uuid": "595c961b-d184-493f-ab6d-ea61310708e1", "value": "49152:mV1EfUoqZj9S478+tqg94a3bFQjjoWg2AS0frIekG:6EZqZRS478+tqEyjjoS0frIe9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746459971, "uuid": "517f8eae-4411-40a7-8998-60f3742f8197", "value": 2494399, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459971, "uuid": "7dcf4283-452f-4a59-9ae2-2d5d70c534df", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13c651a0-29c8-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746459975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459975, "uuid": "9cf75b85-e1c6-4d32-88ad-a011bc3ae2c1", "comment": "Malware payload", "value": "8a2cf1660172cd766af39ea2f5dbf0d6", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "pig butch", "colour": "#913b0c", "exportable": true, "hide_tag": false }, { "name": "pig butchering", "colour": "#f69f1f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459975, "uuid": "25c1b264-9885-4654-af8d-a3b0eb621566", "comment": "Malware payload", "value": "01e40d9f1fc91eab41b7f4ce84f043c5b3297bf9011fa40a6ff32bbb3d4f5c9b", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "pig butch", "colour": "#913b0c", "exportable": true, "hide_tag": false }, { "name": "pig butchering", "colour": "#f69f1f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459975, "uuid": "ef049ac3-6771-465a-9964-35b152effea8", "value": "T1A8D61246F758A92FCC7790724DAE563611564CD18E8397877E08330C68BBAE80F99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459975, "uuid": "cbe79fd0-1aa3-418a-8074-af892f56ab5b", "value": "393216:mEssya/1zzNIySU7gU8Fv/MYBMg/vJiPvxJYEReN5jZgc:Ptyad5IRU7pi/7BMgHOvxzReGc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746459975, "uuid": "b878f067-52a5-41dd-a02b-83d25b5c2795", "value": 12668842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459975, "uuid": "ea5df6fd-18e3-4b03-af63-3815c1383671", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6262e42c-2387-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746460012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460012, "uuid": "9312406c-f3b5-4a89-86d6-743ce2076e51", "comment": "Malware payload", "value": "7f729003a72f938bdbd26e764c006c78", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460012, "uuid": "e546eb68-5ffd-4994-9935-2d4ad72958b6", "comment": "Malware payload", "value": "20aa1fe041f37f66449880877ba893113246f4156c1a499e6a8454acfb8009b8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460012, "uuid": "dbfea2c1-c134-4c01-80dd-6c52239d3cdd", "value": "T10D44CF6232D0C036E5B354318BAD9734E678FD305775968BBF800E6E7E326A1DB263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460012, "uuid": "87115bc1-21c4-4c73-8b98-3118fcd14640", "value": "3eaa732d4dae53340f9646bdd85dac41", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460012, "uuid": "d35e87c9-2324-4dac-9a69-07c963b82978", "value": "3072:kJyAx2rO3XLwU8FAdrFQvgI117ECEULbdo+kXm8/9kP18U1pXDj/lk:kX3XLz8FAhNI8C5KXD/aHrFk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746460012, "uuid": "0902ac3b-1e08-45cb-8527-3d185c17cd2b", "value": 267991, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460012, "uuid": "48bfcf01-b3d7-4cf2-ae12-90408ccb01c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96f5b0d2-29c9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746460624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460624, "uuid": "4740a17f-4dc7-4eb1-af1b-c7ccc5e0a833", "comment": "Malware payload (Mirai)", "value": "b3ebb1cbdd1e1bdbfefedb893be1ed84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460624, "uuid": "adff8a6b-13b8-4bae-89fa-8d0f58ae577c", "comment": "Malware payload (Mirai)", "value": "646e22539c017087ee8c76af0e3e9a1d9fdd16f9f3dcb60697e1440eabf23596", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460624, "uuid": "e0cd53f5-776d-41b3-89da-9540d6db468b", "value": "T1E304962A7E21BFBEE26886310BF35F70839921D326E18742E27CDA585F7128D184F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460624, "uuid": "a48a8f55-61af-45c3-80d7-dd4b5d8d46c9", "value": "3072:uTqIbcRX+BjtMSvQ7nwgePdwtLuvGFHgSLER9JteI:X0cRX+5+WazeiuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746460624, "uuid": "c1158eed-f795-43a7-bfe9-20d1220d0550", "value": 188019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460624, "uuid": "3796dee6-18a3-44d5-9eda-23e9fd275ebb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a76e35a7-29c9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746460652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460652, "uuid": "dbb69f9c-5111-4bca-8ad1-7b9bc10678b0", "comment": "Malware payload (Mirai)", "value": "42ec51530d5c54c73d3f0a29170bdb3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460652, "uuid": "95836b30-3bd0-48a1-b3ed-f00877c3457a", "comment": "Malware payload (Mirai)", "value": "fd8890a2ccf009d7531cb7e6beaff7160dc27342752abfdfc46af54f756118b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460652, "uuid": "6c4e0757-60d1-42f1-a14e-f5eaf8880705", "value": "T111E33945FC54973BC2E23BF7F79A43CE3B2A5A54978733215A296EB02BC178D1E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460652, "uuid": "efb2c3f6-c06e-48c0-9dd7-165a6ec24b03", "value": "3072:hr9P6Dnp9QNSgfJ7ORVrkHg9S2rRcRC/DVAdBefoVJprgp27BqIvnGr0fYpHJDRf:hrAsHgbraU/pAdBerdIvnGr0fYZJDRyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746460652, "uuid": "c636130a-ce15-4282-b837-ba078f4dd024", "value": 156820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460652, "uuid": "7ec709a7-3ea2-4194-be96-c26d58253000", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746461345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461345, "uuid": "a8d0870e-673c-4064-86e1-b101a656f2ff", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461345, "uuid": "4b0fd2f1-b22f-4615-82e6-b7bc0c68d6a7", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461345, "uuid": "4687801b-df00-4f3d-b968-64023376d473", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461345, "uuid": "94b0a1ee-410d-4f3e-ac22-70ce92bc566c", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746461345, "uuid": "24372eda-2f28-4f34-8371-3372ef00ae6a", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf48d920-29cb-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1746461578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461578, "uuid": "7405a107-8280-4ce7-ab56-dbd2617d4cae", "comment": "Malware payload (ConnectWise)", "value": "ee205c13e5929b13a05390d9acfcd175", "object_relation": "md5", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461578, "uuid": "436ff128-d421-4064-b2cc-945bfa80a769", "comment": "Malware payload (ConnectWise)", "value": "1427f8cff5ec8f3779edf1c3fe3d5cfdb70c53a1690b1ead9141e969cbfe7718", "object_relation": "sha256", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461578, "uuid": "d578e773-b32f-4017-84ce-7d8b06aa3331", "value": "T1E7647C11B9C48432C673383107B4E2B28DBDB8302D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461578, "uuid": "7653b874-8e25-48cd-a078-4766e7ad287d", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461578, "uuid": "6af14705-b73c-4c80-8762-00fa8c7429a8", "value": "6144:VmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9Q:g1iw7gryNkSV1hy1Z1u2JLu9Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746461578, "uuid": "7496f3cf-f096-4162-a75a-cc28573799c1", "value": 312608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461578, "uuid": "48cd1d56-da1f-475a-9f77-36a9da3e2241", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a434e6b-29cd-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746462348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462348, "uuid": "2ce0927b-057c-4908-9eb6-eed0ee9a4548", "comment": "Malware payload (Mirai)", "value": "8b6c4064c03b912c8822ca4d4fac5a51", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462348, "uuid": "3d0bba9a-4307-4ebd-988c-9739b1922298", "comment": "Malware payload (Mirai)", "value": "4cce7ffe9eb4be605c6119be3df62c8caee9ccf0737bc2b824317f79bb54e777", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462348, "uuid": "116530ea-e0cb-4bad-b142-d3127b256ea3", "value": "T11AE32A82FD00DF76F40E967605D74B29B270AB624E531672631B3A6ADE372D0382BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462348, "uuid": "c6e0b968-ada3-493f-a6d5-278c7dae19d1", "value": "3072:sw6SJOJ3PT9SyVib0HEuxCpzdaUeFukvKWnDf49/1TpPI:sw6SJkP8yVs0HEuMzZeYkvKWnDf4J1TC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746462348, "uuid": "5e304d00-7898-4aba-b44b-cffbfe74ce7d", "value": 147727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462348, "uuid": "fc3697b6-3bfa-4d03-8db4-971e29388649", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a49a95b-29cd-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746462348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462348, "uuid": "67347460-3221-40dc-abed-a2bb3cc71f2b", "comment": "Malware payload (Gafgyt)", "value": "92cc49b6a0d1082f6b1dabb1736f3b71", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462348, "uuid": "161ef345-f1f9-41ad-9b98-4a28dba364f2", "comment": "Malware payload (Gafgyt)", "value": "6312f0dc5ea847291c60edb1c0845964f1a291256ce09113669cf774d6323e2d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462348, "uuid": "31c3363f-69bf-4fea-8f06-a6ef25e1e351", "value": "T1B6B3E867BB11CEB7C85FCD730AAA8615108DA99716D47B6BB3B4C95CE70694F08E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462348, "uuid": "b056a4c5-bcd8-479c-91ec-f4f6daadd671", "value": "3072:RdbrMMuPEqcb5h1znqQxmkizF9GhsRiAe:R1uMNb5h1znqQxmkizF9GhsRiAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746462348, "uuid": "4a9ef2d3-75ca-4da5-b65f-f25059bcc8f0", "value": 115387, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462348, "uuid": "04203f5d-0438-4662-ad96-567a7b17cd60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b644220-29ce-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746462618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462618, "uuid": "8df81398-d547-4b6a-9199-e9383477358d", "comment": "Malware payload (Mirai)", "value": "d08f939aede4a46b00b164e7f4db27ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462618, "uuid": "b6faefbc-a91b-4505-bbec-e963c5e9227f", "comment": "Malware payload (Mirai)", "value": "4c1632ab85b2392ffd53012575887c6787221e041a926d50b24fc4a1854fc5e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462618, "uuid": "e67daaa4-3362-4399-a2ff-b023133db741", "value": "T13CC35BC3E780DAB3D0930AF616A79B150271E837191BCE94F34C7CB49A19689F7266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462618, "uuid": "2a4db086-d60f-41d7-aa05-bc6e34211229", "value": "3072:eCjUMIbwWu4UJB1XuFEhQsZj7E9b2eARR2v69ny6JP/KTiFi:eUSwWuPXvhQ8j7k2wv69ny6JHKTiFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746462618, "uuid": "28199c19-a8e9-41cd-a456-2e6e8a08aed9", "value": 120254, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462618, "uuid": "54ec2bfd-e740-4a1d-ab38-60aceb22bcd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68f4eee0-29ce-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746462694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462694, "uuid": "4631f542-382a-4fa4-87f5-a627f235baa5", "comment": "Malware payload (Mirai)", "value": "8ae648c581de7f6132365908ce029f62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462694, "uuid": "61e80362-ce13-472b-a7c0-aeb69c87489e", "comment": "Malware payload (Mirai)", "value": "09b2f46a996c6879ae8fd80f70d53fb8ef9b255f5c27cc887a054b2f3755fcf3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462694, "uuid": "f717b006-5e25-4ee5-b5df-e289a18302d1", "value": "T16CB2E1645144EE31E673487AE53E889312DA27FCC3FB75206104097971EA35A2BBA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462694, "uuid": "a4ca2086-8ed2-4180-bb62-d6c0ea20beaf", "value": "768:aNiGkYjVTpoJH6Nas03Bi3pTlas3Uoz+o:AvIkadU1lXz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746462694, "uuid": "e4828ab7-733c-42d9-85d0-a3a885c6c151", "value": 25256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462694, "uuid": "305f4bd8-0cab-4e57-82db-e4db07a384ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fee4e83b-241a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746463451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463451, "uuid": "154c1462-3868-4b34-af9e-2a9ae8ab7923", "comment": "Malware payload", "value": "3477bc7df96ba0d4ea9784a0c5cd86ba", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463451, "uuid": "8148c1b2-d8d2-4d17-b9b5-bc9a44ad0500", "comment": "Malware payload", "value": "9b58cb6a7878cf1e63acf8e6a28b5d59cc517dfab824462044dfe648e570376b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463451, "uuid": "6533d7ce-fc1a-48c3-aa86-16e4545df001", "value": "T1B624C57BB785233508E39355360E35DD2229D130A276876038DFA11E279947CCBBBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463451, "uuid": "17a570a6-5586-4345-9300-7ae1a103bf58", "value": "1536:LNlSN6eqTA55qKDMgQLSPL+bArSlLo+wFN6eqTA55qKDTgQLSPL+bArSlLo+wMgf:xsnEajdAEajrEajZzR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746463451, "uuid": "377cd277-a6e7-49b3-8506-bb27bab62cbf", "value": 213747, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463451, "uuid": "8856df4b-1a72-4702-8826-172df758b745", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50a1ff22-29d0-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746463513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463513, "uuid": "6a0f4f33-7a19-4b4a-a0dc-9f1033d72bd1", "comment": "Malware payload", "value": "769bd35d11eace9e3b22c1d59e70de16", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463513, "uuid": "221abdda-9d40-4f5b-835b-94a2d21980db", "comment": "Malware payload", "value": "6cc52ef5b6612ef69527088147009ed8c171850205c958a361701246a76746f2", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463513, "uuid": "11f5a392-57d5-42f1-a189-838e1dfdd36e", "value": "T1BF851258D31168C6FD3A40FA8561A118B6677C3A87382FFFA7A0D3312F936D01978B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463513, "uuid": "745e62ff-9d72-4614-b653-9fe53d4b9432", "value": "3e2a6ecfffc5d43a7565ef87874e92c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463513, "uuid": "45a7f0db-ee43-4ac9-b2f5-ef9d22603ccf", "value": "24576:Kno9eS8cpPajY9netTMCns53lj9nIQTeuD9netTMCns53lj9nIQTeu:gSLS6eth03pZMieth03pZM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746463513, "uuid": "659c5109-71a3-49b4-989d-5b513e908213", "value": 1833984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463513, "uuid": "9b77a9ff-cd08-4aab-99fa-c58b406cd5b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c00a1ec9-29d0-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746463700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463700, "uuid": "2e7b7db2-a9b7-411a-9b72-c8b381f55b31", "comment": "Malware payload", "value": "c79e2eb2f9641bc7b3aa996dec1d8d3d", "object_relation": "md5", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463700, "uuid": "145ae1c3-512a-456c-8ad0-922019709b58", "comment": "Malware payload", "value": "774b1e5642a01c5864e1c74beeabf10ea31c7324675ba811e5b42c1c6c23453e", "object_relation": "sha256", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463700, "uuid": "69515cb7-7bcb-4ea3-a374-655497ad8bed", "value": "T1AE163301B5312012DB0933B8CE60ADD92371E8B857975EBFC3F819966D34A4626793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463700, "uuid": "9bf1c385-c5d3-433b-9377-1dcbf7eecaa2", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463700, "uuid": "d0848882-b431-43fa-85fc-c96d1804162a", "value": "98304:y3Zz4osZlNWZcGlE2yk33+aXnLP2wgHVx4ZRzghfT/TNQwgzKlESHIBiwed:DlNwcGlE2yq3+aXLP2tHf4Ah1QfKExed", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746463700, "uuid": "bea96846-dac6-41a9-9784-23b29cd3b0b3", "value": 4363264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463700, "uuid": "98f89dd4-523b-4fde-ace2-16cae186643a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "064d580f-29d1-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746463817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463817, "uuid": "4020ad58-1845-49d2-8ba8-1c45cd839b45", "comment": "Malware payload", "value": "106344610df409f62197e2831b8fa028", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463817, "uuid": "d2c1e684-9d09-44a0-83a7-2991d6dcd9c1", "comment": "Malware payload", "value": "1c26d0976a9c62066c6605463469387072d9e3a285cd1eb9610062d800f48f9b", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463817, "uuid": "50b98da9-9741-47ef-b673-5838c0639d54", "value": "T10AF2FA7B628015AD112FC19AEDB87BB6D127F3C9D324F44A76504C591BC1FB38840B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463817, "uuid": "fbc832ee-955b-4272-8eea-0a661d1d788f", "value": "768:01gCpEFTgCXu/hDUfCn0d/fa9Z+7h8EOKv3/sH54duxCWjsRAzRXz/tHg:01/CT9WUv7hh3/sZACm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746463817, "uuid": "819b9685-3ce6-4afa-af05-e4729ae0a4e0", "value": 36374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463817, "uuid": "e5b33940-d478-464b-b078-462d45dc2f18", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d1f2276-29d1-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746463829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463829, "uuid": "b6f2c77b-f49d-448a-86c8-4e8179a4cf0d", "comment": "Malware payload (Gafgyt)", "value": "a87a15f92a9a5061827cf35b28e0e9bd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463829, "uuid": "158a2396-03db-4257-b92d-14e4ad9e146e", "comment": "Malware payload (Gafgyt)", "value": "28ce56a168985c3375ed53b8c17ab6e5765d0d0401e9f24c909ca8cce6461197", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463829, "uuid": "c6309b6b-aae6-43a2-b705-e6afb10bb233", "value": "T151B3D86A3A21AFFFD06986310BF7AF2087D522D626915383F15CD7585E3128D2C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463829, "uuid": "11d286de-5529-4d91-9003-30074b4e3832", "value": "3072:0VW0fIHznlZy5h50qBkxmkizF9GhsRiAe:0APT3y5h50ZxmkizF9GhsRiAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746463829, "uuid": "ec9e79b1-ef11-42a5-b982-7ce9fdf044d6", "value": 115243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463829, "uuid": "8f20075b-9da1-4612-a88d-5347950825a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4c924a8-29d1-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746464083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464083, "uuid": "c6fcf90c-899c-4a2b-a284-78b45eaf90be", "comment": "Malware payload (Mirai)", "value": "3b6f4969767dda1a5bb640e6143c6166", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464083, "uuid": "e09e6c61-3c94-4617-9ced-c45a1d5dc51e", "comment": "Malware payload (Mirai)", "value": "959caba248cbae06b4c76a4508003bd9d652bbd9867702a80645a7910d356320", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464083, "uuid": "c71b4b12-0bce-40e2-847e-51a05c80eb9a", "value": "T1CDD34A13B5D2CCFFC4A297F50BDBD2659963F4390B3A125733A47DAA2F0E9891D292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464083, "uuid": "f7805eaa-1256-40ed-93ac-49bf95228f9b", "value": "3072:YsuSJBWCeETuzREnUJYCGaTc9XMqjGO2BDjjv1FjP3+9/NJMHI:FPDnVFhMqjGO2Njjv1FjP3+JNJMHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746464083, "uuid": "18166a19-f905-4ab5-9a48-c934837daf6c", "value": 141844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464083, "uuid": "a5740dbb-c0ed-43d0-b471-b3610e05a760", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4842a4cd-29d2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746464358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464358, "uuid": "dbd0ab4d-0ce5-4b4f-bec6-7353ebaf819f", "comment": "Malware payload", "value": "5bb3e046a691064d1b2f28b111f4b367", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464358, "uuid": "42980b8b-83f0-4aa6-8f43-e7c621247064", "comment": "Malware payload", "value": "d61db03d072e6fbd80fda62595d9045f73f0373861744485136f702416dbfb8c", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464358, "uuid": "6465bf4f-2594-4044-b167-25cfe7846777", "value": "T1039522513FA11261C1E1D23234BE33988E85A6C8D310F5569C9E5FEB3C7E1452B9AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464358, "uuid": "a226af29-069b-4010-9567-77b86c484c68", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464358, "uuid": "b5ba76aa-ac50-4ce9-abce-707b0b79f6a3", "value": "49152:O6foQpdr8EZlRY3RcpHeAvWzGEsve0CP/D6:O0fph8EPG3ipHeaWrsve/D6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746464358, "uuid": "7f8b4761-8e9c-49e1-a3f8-434ef2c308a1", "value": 2061312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464358, "uuid": "9009f1bf-f1eb-481d-835c-391887fe0481", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2e6a3cb-29d2-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746464617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464617, "uuid": "28056071-854a-48e3-906e-e736f92dc78f", "comment": "Malware payload (Mirai)", "value": "b72e5cdf7b6d9a65695bb064e6851c02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464617, "uuid": "7620244b-b9c7-433f-abb6-0d8d4fca3e33", "comment": "Malware payload (Mirai)", "value": "09aeb79d5573cacc33892805983522c6358505d379db4d8240572579ee212760", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464617, "uuid": "11a45058-2184-4690-b1d1-b880fd020b76", "value": "T1DBE33944FC55573BC2E23BFBF79A82CE372A5754979733215A291EB02BC178D1E2A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464617, "uuid": "c486ed9a-814e-4ff3-973c-18f691672e1a", "value": "3072:LJe9ervnp9QNSgfJ7ORrJcTt3TwXzZvRSPcApveAGo4tF+CVWqvYlqijhH/uD36I:LJeu0TtMXVJSUApveXUqvYlqijhfuD3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746464617, "uuid": "0f1ff628-0619-467f-ba8a-77035cfbdedd", "value": 149962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464617, "uuid": "1bc0cc66-a3af-4c9c-a066-2783ccafebf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfcb5916-29d3-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746464988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464988, "uuid": "c182e9b9-a247-4428-b31e-39d7a4751f08", "comment": "Malware payload (Gafgyt)", "value": "bf6da6a1a431ac496b742f9d29b36f93", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464988, "uuid": "871d61cd-6a55-4543-a2bf-0b3838ad9cbf", "comment": "Malware payload (Gafgyt)", "value": "e67544760c81f5b5b874e428a0d5b631470066bd757359b05c63d4bc71106df7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464988, "uuid": "e073a3dd-3ff9-43c9-a245-05d0f73bd066", "value": "T195933B17A652C57BC08762F41BCB9A11AC13BCBD0B63A30673D4BCE82B159D72DA9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464988, "uuid": "883a5f06-320c-4643-a631-29c95c330c94", "value": "1536:W7WREyqkQc923v2uNi7pNF+BoD3Qphanvn00GFmoI5um2Xj5YZA0e:4RkQT3v9EbYBo7Qphanvn000mr5um2Xx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746464988, "uuid": "ae66e798-e8d6-4c81-9ab8-5b464d223fe1", "value": 92932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464988, "uuid": "d3a1dcb9-ce9f-41ae-a710-29a5e1c033eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91576d62-29d5-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746465769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465769, "uuid": "5b49c575-63a9-497d-8684-7b80fb361872", "comment": "Malware payload (Gafgyt)", "value": "d32d89f93bb9f0d4cc6e978242054b5e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465769, "uuid": "e5b0a391-a94d-4417-ad37-dcae04a11a74", "comment": "Malware payload (Gafgyt)", "value": "8846f1a7b6e55ab85c8200edff2be3ebc07719f36190989894ab0dca41bea0ba", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746465769, "uuid": "5c220b7d-f5f9-4556-b380-b98723634990", "value": "T1C0A32B05F9114763C1C327BAF68F474D3B2267A957DB3302AA357EB02FC27991E25A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746465769, "uuid": "9aa14794-0376-406e-b455-d8503e153fe1", "value": "3072:IG8es2aOta5haG4uKtvmCyrQ0Knm4XnTe:oeKOta5h6uKBmCyrQ0Knm4XnTe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746465769, "uuid": "86fdf091-dde1-4d82-86f3-f9a06a178769", "value": 103742, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746465769, "uuid": "4a63e617-f910-4ac7-8cdf-0d34b2d3f74f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8c4a7a1-29d6-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746466345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466345, "uuid": "5c111cd5-f363-46b2-82fb-f31cfc0907c6", "comment": "Malware payload (Mirai)", "value": "0865fbbe3971ccdf7a4164086fedc0a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466345, "uuid": "3e9782dc-95ef-45c5-9ff6-bed55e34de2c", "comment": "Malware payload (Mirai)", "value": "0b2459db45b900b80bc56a95a66877810fafde3623962177d605648ff6237cd6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466345, "uuid": "5c8ff2de-dc46-4328-8cb5-58fabb4014f1", "value": "T181E3193B27271E33C5D1287102E30331B6BAD759387A57DBB9C46CAC2F1AA84351A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466345, "uuid": "9dfc9ca8-5a54-43e7-83cc-69cd0644d6ea", "value": "3072:pAx8K19dras7Sd9UEXY9+ea8Iq4KGvOWfDl49/1TZGI:pfKpraseddK+F8gKGvOWfDl4J1TZGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746466345, "uuid": "804d527a-77cd-4d1c-97fa-aff1d329555a", "value": 154518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466345, "uuid": "a3341213-28ad-4628-8fba-829e9ecd5e87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73ebdbc1-29d7-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746466578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466578, "uuid": "674718fa-ba12-46ca-a3e3-ff80d11b6aa4", "comment": "Malware payload (Mirai)", "value": "61c12bfe75ee3900f9e573d519718b89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466578, "uuid": "aebb5454-72ae-447a-9013-392fca217522", "comment": "Malware payload (Mirai)", "value": "1e613f3f1bfd5ccbf190aa43b152eba8cdfb61c0a81b1dd6ab753b100ffefeec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466578, "uuid": "ddcb870c-4bcb-4813-9a13-c16905f30b86", "value": "T1DEF32905D9509737C1E327FBF79A828E33271BA4A78B33255A286FB41B81B9D1E3D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466578, "uuid": "315fe6f3-fe02-4536-ac31-f2324f4c3805", "value": "3072:UAWK1ji/bdZZAn2iLqRhhahNf31LnhliOEvPX26EsmdK32AgMywF1Ehu1ZhmyX9Y:7qRPaXf3Z+Os2ymdKqMr1myX98RZoCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746466578, "uuid": "7341efd1-4722-4753-9ec8-e76bd01b5478", "value": 167698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466578, "uuid": "1318cfa5-9b87-4ec1-b7ed-ae2a635b8497", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1746466607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466607, "uuid": "add196cb-f74b-4f2a-9fbe-954f3e577516", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "saudi arabia", "colour": "#782074", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466607, "uuid": "c7732327-06f9-4b29-9f1a-a66246651596", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "saudi arabia", "colour": "#782074", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466607, "uuid": "07798416-a793-445d-be33-ad258063bc3b", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466607, "uuid": "80d6bcb1-9c21-42ef-b242-d1f8de08ef4d", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746466607, "uuid": "2beec2db-3024-421c-86f4-9ef33eb501cf", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466607, "uuid": "04aefebc-0b1d-4922-a08c-8ca919d20f35", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef459659-29d7-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746466785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466785, "uuid": "987db03b-cd4a-4716-8e55-0e8f704f240f", "comment": "Malware payload (Mirai)", "value": "33743bdd4023766d4696134dd95a4019", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466785, "uuid": "edf13558-7cdb-4770-9265-13a4394973f1", "comment": "Malware payload (Mirai)", "value": "696a6982fde964537da8553c138cd575a4de65b225b5d37c73bc974a583306bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466785, "uuid": "8028a651-7271-406c-b334-2c4fad56544e", "value": "T17AC33BC7E642C7F3C4420EB317A7E62D4625F8368D1A8F89F31C7CB49B169C9B2192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466785, "uuid": "2e5c8b5c-45ab-4a18-b324-6c23b5726e88", "value": "3072:0RkkNVx+9GJRtiTeuEBFkPTRnQysbmBJ2v69ny6JP/KTiFi:0pvx+8lRbWTRnAmyv69ny6JHKTiFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746466785, "uuid": "b2e52979-7f2f-42ec-b31f-d1bcb1b5cf4a", "value": 122398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466785, "uuid": "a03c7a3f-f03c-429c-a8a6-be75354f8db3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77062949-29d9-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746467443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467443, "uuid": "39d6ef65-1067-4b94-b413-414069c4a24a", "comment": "Malware payload (Mirai)", "value": "55177f03a15b4991c3e7fdcf52bd2b94", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467443, "uuid": "6b4c401c-cb0a-4081-8ef2-2cbfebaab8c4", "comment": "Malware payload (Mirai)", "value": "7419328518ce5180c4bd0fae15f950d61218eb00403d1f61991cb0fb4583aa87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467443, "uuid": "0f3f5df1-bb53-44a4-a4be-70934639b511", "value": "T1BFD34B47C8A28F77C0566EB629BB5534075AF9220B4F0BDA653867F4074F9CEB10EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467443, "uuid": "4ad6536f-9194-42ec-a6cc-cba1e9264e29", "value": "3072:Ai4XDHKEafuOlbkjkxopp8hM8M/fjejiA+Wvg3nD2w+//Tp64:tIDH8fusypz9je2A7vg3nD2wo/Tp64", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746467443, "uuid": "6284edb1-05c2-4160-818b-a5aa375f3e98", "value": 135098, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467443, "uuid": "324fad9c-0464-40b9-9635-8a1013ab6fcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8da7a9b1-29da-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1746467910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467910, "uuid": "fafa5abd-8324-4335-a8fd-39aed3a1f3b5", "comment": "Malware payload (Mirai)", "value": "d23b9fc7cab749b1764156f643bd90c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467910, "uuid": "bf298781-85e9-45a1-9714-049288d14976", "comment": "Malware payload (Mirai)", "value": "904077235a9d94979a1eaaa011f9fd6a1bf40620dd6b95b4e9387fcc1fc82e46", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467910, "uuid": "c519191b-5172-4969-9855-354c31a8c665", "value": "T190D34B9B6B1C1767C1BB1AF12DB727F08BAEFD6101A62184A40DFFD40372A702516F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467910, "uuid": "b8ab7f51-51f1-4aba-a965-bc26123fadf7", "value": "3072:hmbnVR5V+2zG+ahytmoNv+15hcnvvWnDf4urTpzI:Ebnz5V+2zGNh0t+15+nvvWnDf4urTpzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746467910, "uuid": "0b2900e4-82ea-4a5b-8146-9571bbb2d2cd", "value": 142996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467910, "uuid": "383dc4ed-5728-47c1-9a29-ad5d7d55be7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "895c0019-29db-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746468332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468332, "uuid": "1c5cabfb-1939-4f47-9891-2ea3a1749969", "comment": "Malware payload (Gafgyt)", "value": "af2fa707569b68383a93d722448bd47d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468332, "uuid": "3b1f2191-bf9b-4800-a15a-9eddd7cc5eb4", "comment": "Malware payload (Gafgyt)", "value": "8abfebad11738b76dd629cff9457e359ad9f52312910de884dea0ab5777d5f4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468332, "uuid": "dbebbdd4-2a50-442f-92c0-ff02c5c9d6bd", "value": "T146A33A377B130E23C0CA947111E31731BBB5D2DA39FA5243B9A16DE86F266843562F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468332, "uuid": "0b7fd301-25bf-4216-830a-e9d1973b0968", "value": "1536:XBJ2MNM5oqtkUtnqphaK6igkvmQmF6OXj6ufeuTe:KMN8vgphaK62vmQmF6OXGufhTe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746468332, "uuid": "60ce9012-23ef-4285-a6b0-c0f7b3a635ac", "value": 101398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468332, "uuid": "9246855e-3c30-43b8-b1a4-063b9454ff0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00fddff2-29dd-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746468962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468962, "uuid": "d5cfcafc-6a4d-47f1-a1d8-ae74cbf78384", "comment": "Malware payload (Gafgyt)", "value": "097da61fcffdab51e166c1a732a1a4d2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468962, "uuid": "74252908-90eb-415a-8384-3aba912a3738", "comment": "Malware payload (Gafgyt)", "value": "35b03af85d4d7dfb5c063cfcd60c5465d107d057ea4a9ed5a9225d4ecc1df1ab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468962, "uuid": "af4e3534-ed3b-49a7-b7f8-01c25db3088d", "value": "T19CC33B06F5514B53C1C3177AB69F521977232BB897CB33229A24BFB42BC179A0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468962, "uuid": "d738ba21-1ef3-4e11-84a8-9e1f8633e2d6", "value": "3072:Yd5adFfNQamBJl1OV5hudKRvF2/bBbmOQUJ1UXpTn:E5adFf4OV5hudK9FabBbmOQUJ1apTn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746468962, "uuid": "223dbaa2-f16a-4cb8-9f9d-d1be87e1ea16", "value": 118812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468962, "uuid": "0c3f891a-ddf0-47c8-acd5-fb5269f00b93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f87ef5d9-29df-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746470237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746470237, "uuid": "a372ba4c-4c66-4c88-8701-4b4d2672066e", "comment": "Malware payload (Gafgyt)", "value": "1c16bb372dc3f7e48aab34b9b6bf03a0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746470237, "uuid": "f1c88f3e-fc1b-495e-85e2-7236a3dc0710", "comment": "Malware payload (Gafgyt)", "value": "9c63e35c3a5933e4189dc3521ad736b12fd01a942e262269830ccbb8c1f60a93", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746470237, "uuid": "7578a961-7abc-4d0d-941a-3d4f63ddfbba", "value": "T1B3932A03771D0F83C1CB59B129FB27F19769B9E502A36181A91BBE905B33A782513F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746470237, "uuid": "6c646aa8-1ac4-4e9a-adfc-39ecea420b57", "value": "1536:a347i0UzozNrQ35XeaaV8x6IfoSIhKh+wd5hiWXTL9mQmV6qDjjoflee:aom0GozKuDe6IAS9t5hiWXTL9mQmV6qA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746470237, "uuid": "e3f31a0c-fe3f-4411-adbb-b2aa65a29d75", "value": 89920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746470237, "uuid": "6e0eb461-b061-4fe6-910b-bdecbff4c637", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13b954bb-29e2-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1746471141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471141, "uuid": "4d9a2142-c22b-4e2d-a947-01303405eeed", "comment": "Malware payload (Gafgyt)", "value": "ae55af169e33a5b12067d331214bdc5d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471141, "uuid": "a23215d0-efbe-4772-bca9-07dcda62debc", "comment": "Malware payload (Gafgyt)", "value": "1441a7361a7ca17c6ccfe9f0f33a5354f0a9d99547be2b3c40bf320712df2ed8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471141, "uuid": "1ad37da8-a298-46f8-91e4-7ddf7049eede", "value": "T10E932B05F8454B13C1C327BAB6CF47493B266BB95BEB3302A6346EF02FC5B991D259", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471141, "uuid": "09fa899c-e648-49d3-b9e4-359d850d96d8", "value": "1536:yu5sWiQ5ftEesFfw/DrRTOss5hOkKxX86I0mRxqQEqn/lJXfPe:jiMsGri5hOkKO6/mRxqQEqn9JXfPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746471141, "uuid": "6a82c0b2-bc4d-485a-aacc-9c46ff6e91d9", "value": 96196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471141, "uuid": "37fbfd0f-500f-4f6f-a8a6-b8e9a7081858", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "166008c1-29e2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746471146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471146, "uuid": "d9276699-9496-4208-9162-7afbffbdc17c", "comment": "Malware payload", "value": "2a87cc35dcf0c8df0c3580c68d9bc275", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471146, "uuid": "30bef06d-45ee-414a-b3e8-247e30f5bd74", "comment": "Malware payload", "value": "191c2d056bd311966ce310dd36a51fc0a029ba08d030ea5a3c5002c3efca7606", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471146, "uuid": "b2424939-1984-4a79-ad39-120b9a37e102", "value": "T18F139419917F126F3417D8E53BE06B8331D0202FD74AE92C7FFCA1604F56DAA9692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471146, "uuid": "08833685-d757-4a98-8661-2fdebffe2269", "value": "768:e7olFlFvFEFE4iI2JoJwYHJ3jYZf7EeF9:pl3x2K4iCGYHJ3cN7EQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746471146, "uuid": "acf51e3a-6230-4c01-814f-ff08b5ae65e6", "value": 44512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471146, "uuid": "e360c179-a83e-43d5-80eb-a1975c613a1f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef1d7c2-29e3-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746471831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471831, "uuid": "45e5df2e-44d6-48a7-a5bf-625a7fcedcc0", "comment": "Malware payload", "value": "c4cd7b6392f31ab57aa5dc5f716c48fd", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471831, "uuid": "52dd1376-e06e-4e1d-a028-8ad488e28793", "comment": "Malware payload", "value": "99e0dac7321da6b81b52a05ca24294abde5766a2c5134721384c7c4572cd67ea", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471831, "uuid": "0949ef8a-c2e1-4716-abb2-2768320d2512", "value": "T1B69533BDAF5A9002DE05453552DE2E2AB620D8264ADFD3C30F9A99D52CFF57CE4E40", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471831, "uuid": "d29df084-3bb3-4507-ada3-8a04a6869147", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471831, "uuid": "40527eb7-541d-4d00-8a67-9ad02a79e0e2", "value": "49152:cGK0F2nuzwHYhSf5MLfz6fVYABIMgnbF:cGFV4Hq+BZgnbF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746471831, "uuid": "511dde94-2eec-4e29-bed1-ea5bfdeb855b", "value": 1917952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471831, "uuid": "90033380-6293-4b00-8889-f50fb4508262", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "852c10c1-29e5-11f0-82df-82aee05be84a", "comment": "Malware payload (Adware.Koutodoor)", "timestamp": 1746472620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472620, "uuid": "cab10a7b-7980-4cae-b828-10b9730009da", "comment": "Malware payload (Adware.Koutodoor)", "value": "f34f625af07ce38de6280e9e22ec9b4d", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472620, "uuid": "85a862f2-9fd7-4200-bf3b-2e3c118f2d50", "comment": "Malware payload (Adware.Koutodoor)", "value": "31d4142b5eba847e1129084f98f5ca176dc67b314e894b20d05ffd2001debea8", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746472620, "uuid": "a0bb7e7c-f9ab-4df4-8564-d07ffbf4666c", "value": "T1A7C312918EB3D713FA6F007A921A36935381FF7201EC625BED94E7138B96F7896034", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746472620, "uuid": "00418f9c-a47a-4183-b088-7aeec0ef91cb", "value": "8378c1e8455f3a2c07ac8b6c8932363b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746472620, "uuid": "c1941f7e-7044-4410-9834-6493ffe81aab", "value": "3072:yXWKWSGqy7Bfi9aUwJZ5UQ8xyOP6jgtyrFF7MC:yXWqy7BQaUwJsQ8x1P3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746472620, "uuid": "44ec48a8-4b00-49f9-8001-b29c1f5f941c", "value": 123392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746472620, "uuid": "0bef6ef0-6370-47ba-8a24-fe5bde74fe68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b1f7ff2-24ad-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746473110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473110, "uuid": "bbbeb8aa-2593-4c93-9505-1852565b4955", "comment": "Malware payload", "value": "8df121b1f6249e2a71c5d030139de061", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473110, "uuid": "cdab136e-9c95-4bf3-b057-806f6693ea79", "comment": "Malware payload", "value": "61095942c992c31f69fe60c81a40fbdb65586817e0f09828225cced400c3597d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473110, "uuid": "c753516f-b144-4a8a-ab36-4ab2654257a7", "value": "T1ED34D77BB789233518E39259364E35ED6229D130A336866038DFA12D179503CC7BBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473110, "uuid": "3e1cfb87-88e6-4789-8f98-ac93ca168a5a", "value": "1536:LN55iKbITN0xF7Od/mlpMaaGR1gerWwiTuITN0xF7Od/mlpMaaGR1gerWwiTfaar:x5auOe3ShHuOe3ShCSh1uOeGuOeo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746473110, "uuid": "33be7914-f1a7-4610-8235-2b02e9bd31fa", "value": 233112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473110, "uuid": "502f106e-73ec-49bc-8ff0-d944a7ffafd7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceffb2f8-29e6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746473174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473174, "uuid": "5dd317a3-edde-442c-b686-6b1bbb9cbeb6", "comment": "Malware payload", "value": "a09ab0da22265a240c0d64d87670a2df", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473174, "uuid": "734fe289-5ac6-47bf-bb22-71c6776a2fb9", "comment": "Malware payload", "value": "2ab0b721edb68a11acb2301cdcdf2ce11c12cb6f7b4704ea7f432010c2d23653", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473174, "uuid": "ce33d5e8-5412-4ccc-a6e4-d0d48c2ff2c3", "value": "T1E5D4DF18C71199DAFE2A00B94461A211B6337D3A8B381FFF63A4D3322E537D45A3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473174, "uuid": "cb31a0f1-e519-49b2-b16c-8f1043891d7c", "value": "3e2a6ecfffc5d43a7565ef87874e92c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473174, "uuid": "32f2b0e0-c3b1-49f3-a88f-d497e3c3c53d", "value": "12288:Tno9eLBY8cisPKZ+src3xSRNFcHxw7+t5IDecHxw7+t5ID:Tno9eS8cpPajYw7+PIDbw7+PID", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746473174, "uuid": "3a1ddf52-a2e5-4b9a-87a3-9d85918bdd97", "value": 641024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473174, "uuid": "206b735a-c43a-4a32-809d-f23b7dfb20d2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bad690cc-23bd-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746473267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473267, "uuid": "fb35788d-fc60-436d-9682-5972c1ce9604", "comment": "Malware payload", "value": "a64b22d7c83a147d82d5614bb8b64223", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473267, "uuid": "0bc17d9c-0c1a-4740-a953-12c5a0d341b2", "comment": "Malware payload", "value": "ab54396448a2ede3c7a90ef259a4d73b5eb3342af9af5e653902ae332573fd20", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473267, "uuid": "ac36aea6-36f3-4d43-a27f-f34ae5004221", "value": "T1E514B77BB789233508E35355360E36DD6228D130A276C76038DEA12D279616CC7BBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473267, "uuid": "e6f0dd54-b04a-4691-8cf4-eeb65c50ee9c", "value": "1536:LNnG89oSlYeApqFZZ4kbR7INAsWkzKeM9EM9g/ApqFZZ4kbR7INAsWBzKeM9EM9H:x1T77rTuX77rEuDuO77rT77rG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746473267, "uuid": "a19f3efc-a703-4b33-ad2f-66d5965f0bd3", "value": 195111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473267, "uuid": "b767bb88-609a-4f04-a1cb-9f9ebf499800", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaeedf7b-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1746474638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474638, "uuid": "026e4ccb-daba-49db-bf59-58256ca276f3", "comment": "Malware payload", "value": "534eeb3d381eed654e9670ad363805ea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474638, "uuid": "dd1840d0-fb37-446e-8d45-5ab692935d23", "comment": "Malware payload", "value": "dc6a50c49bf7620593656bd8d3866566bd6410f663fed6f082848e18974621fa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474638, "uuid": "8a683322-d440-4b6b-823d-2823af80d1e0", "value": "3D4302C7D96A873DF8B6C9BC4E96C8444987012D7143B0AF458CA5BC38797951E8AF0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474638, "uuid": "f83bc351-a5f2-4dcc-9bae-61705aca898b", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nO:mOE6PWo1T5bz4LVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746474638, "uuid": "61cba167-3e32-4f19-9eb9-5f04cfc35627", "value": 56472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0321599f-29eb-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746474979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474979, "uuid": "db7b330f-b027-4105-9ef4-67f59a5e6262", "comment": "Malware payload", "value": "ee5397c13b50d65ad5c4de64c8eee52c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474979, "uuid": "33ab82f9-48e6-4097-9a98-566bbe24c8a1", "comment": "Malware payload", "value": "2792baa9e19d523101a41067bdcb82552861014bd0c8635989135302ba11856a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474979, "uuid": "404dc9c6-96da-4b7c-8929-8ff285017a19", "value": "T1A3E54B726505F2CBD48E177894B7DD82695D13FA4B2448C3A86DA87EBEB3CC026B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474979, "uuid": "e5356b7b-3305-4ad7-9bee-d736f3a533a3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474979, "uuid": "e685586f-4250-4ecb-b2bb-5b91fb0c9b6c", "value": "24576:Y6PRhdTYJz+QXLClgChkKNgUfvNPcb7qXbgn+tiUpZTEjCyyShxPDzL4pqIuWVW1:Y4RnTkXWnFVvNP4cNhShxg0wh93Te", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746474979, "uuid": "f003474f-f091-4d41-a299-09c1e2ff5303", "value": 3025408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474979, "uuid": "7d7563e8-b128-4189-994d-92bf46c4004a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b55bf0f4-29ef-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746476996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746476996, "uuid": "38271e5c-65f8-4180-89c2-984d5ccafb58", "comment": "Malware payload", "value": "380989ec2e9a6e479019db074c24440f", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746476996, "uuid": "920e75c1-c92b-4a0d-b7d8-42a9e8a69611", "comment": "Malware payload", "value": "e6a2a65fa890aed824f874561032c61aef76d56627cd687b933787e73f96d9f6", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746476996, "uuid": "6beebe42-f8fb-4087-9d4c-968a03adf18d", "value": "T15DF23BA23AB7E06006E2C5DAE8775215F638214A3405C06CF96CD8CE365EE87D73EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746476996, "uuid": "a08ed83f-9101-4b27-b440-e1135382869c", "value": "768:TP2y1alVcJ7n85NdxBB5gPCGIW8rnaVGexrEs0Ddem+euROvvMzLXWI+6Ch/ZXh4:NOrnSGexrECRL5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746476996, "uuid": "ef7f9d58-e516-40ee-b463-19d103c0f862", "value": 35693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746476996, "uuid": "d61756fd-7a8b-4ced-b516-cfc291a53731", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1f8dcb5-29f0-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746477500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746477500, "uuid": "a3b5a4b4-a41b-4d25-98b8-2f3b7d2d0d56", "comment": "Malware payload", "value": "13015f43c3e48631b0a7f68f71fc50ea", "object_relation": "md5", "Tag": [ { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746477500, "uuid": "8bbbe0ef-204c-4f24-a7ee-4d0821f5b702", "comment": "Malware payload", "value": "2b64de6c19723301c2c903d31afa031c2b1228f445c3e2de7faf384f7fefb948", "object_relation": "sha256", "Tag": [ { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746477500, "uuid": "1a5ef63a-5490-49b6-a366-da8d8a3d7d7f", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746477500, "uuid": "0c912dd9-55b6-40e2-9f4d-3da51f990c2b", "value": "3:6ekfP:6FP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746477500, "uuid": "35da67a2-5ac9-460b-a82a-0fb0b7bb377a", "value": 206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746477500, "uuid": "44fb0990-171d-454f-b1d6-1074259c5817", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0fff386-29f3-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746478707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746478707, "uuid": "afddbeef-3c23-42a0-a290-630f85ab4bb6", "comment": "Malware payload", "value": "5a8080ed3becd66f0fdc4c6aaf895bcb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746478707, "uuid": "1c74725a-2037-4cf7-8244-18faa6e94751", "comment": "Malware payload", "value": "1136f0fdf4ee580e3247e01f6ffddd61dec71e581e830adc80ac46c32593289f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746478707, "uuid": "81de9783-083f-4fc7-8578-55a76da0beae", "value": "T190553331BF958E17D35DA2A029BE958311F5110E588F3D9C12217D9C907AF32A2F3E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746478707, "uuid": "c3c0cdac-1323-454a-baf3-8e3880fee100", "value": "24576:XJiVrURQB5YmMXilnWQL5xemLP4bc9wgptCkxd1NUstKI+5ET82NtDA2B+D:5iCPOX1xPEpgHjUzeTxtngD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746478707, "uuid": "f91b2b87-d7d1-4aab-b141-61bf5dbbddd5", "value": 1344592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746478707, "uuid": "f4769abe-cb23-48f4-b4d5-94024ed266bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd0b4625-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746479183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479183, "uuid": "758f53e6-4754-4bcb-8ec2-8742e572d69a", "comment": "Malware payload", "value": "347095cde64e1ff7780533d9face6d5d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479183, "uuid": "91490301-00be-4273-9de5-7e1cd69bf724", "comment": "Malware payload", "value": "5193101a11b07f1c4c188d1221149797bbf19abc717f4c7657fe24b4f7b4fef6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479183, "uuid": "9f49adbb-173f-405a-a648-ad48d2fc79a2", "value": "T1A0159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13A81DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479183, "uuid": "a4ecc7f8-14c3-4593-aa94-65c20e2730df", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479183, "uuid": "06d574f3-ab19-4ce9-86bc-f9b1484d43e1", "value": "24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8aM3g:dTvC/MTQYxsWR7aM3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746479183, "uuid": "b52417d7-ac28-418f-a4a9-8dddeb6a5775", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479183, "uuid": "f76eea57-d8cb-40ab-a59f-3cd3875fd891", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e38300ca-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746479221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479221, "uuid": "45c0b31e-9465-4282-96d3-3f28712d5dce", "comment": "Malware payload", "value": "782620289b264b95241a91b9d087a438", "object_relation": "md5", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479221, "uuid": "808edb46-3ad1-4918-960e-18ef711a81fa", "comment": "Malware payload", "value": "ba257177a52bb0c3d310d7370d065c5452d1cbfb4e405e2cd494b9e4d71e1bb8", "object_relation": "sha256", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479221, "uuid": "2ec6de51-2968-4033-a09b-3d3b4d4ab85b", "value": "T1CCF1D81BD9048216C37373EA5991CD0DE78F009F92139F1D75ACA8843BB135D8AF69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479221, "uuid": "26033975-aa80-46c9-8586-7c5e1547c094", "value": "192:N7ysfnvynOzad4POVk1Gyp/SD2zKDUtXDZABygKlkO7BGTG:tlkhKIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746479221, "uuid": "f2a18698-227d-44d8-85da-b4acca874f6a", "value": 8192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479221, "uuid": "a076b41d-585c-450d-928c-075098c05872", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89e3597d-29f5-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746479500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479500, "uuid": "d63f15d6-557a-4057-85fe-c4347da4fc1f", "comment": "Malware payload", "value": "a90167e75802a5656af6d3c63be9f737", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479500, "uuid": "cf0d0bd8-1c2b-40ed-b454-97117982910e", "comment": "Malware payload", "value": "fb6963e70100cf48f9b05ebafe49bb7bd9049759171e220f186ec9a7812be503", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479500, "uuid": "c08dbd06-7fed-488d-afe9-cd8887cf845c", "value": "T107037E277CA24177D481C6B0A4F58F267F7F262207B29597DB5898493E309F0EA3A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479500, "uuid": "adf4f49d-890d-4db2-a72d-96e0df2672d4", "value": "fea6625d787a8c92c10a588ab96b37e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479500, "uuid": "210e1f7a-01a2-41d1-9d1a-167ce10441fd", "value": "384:ZD39FMUgTVOQ5CMf19RHKCm+ZOwIpWf/jhcYyY8yxrFjWoXr:ZD3w3ZH5C49RH9wEdToyJFSoX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746479500, "uuid": "a9310635-c21a-4b1e-97e2-3575ba32fe5d", "value": 40960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479500, "uuid": "c2e6a529-38d8-4fac-aed3-e7154c4319f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c632d08-29f6-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1746479907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479907, "uuid": "7eaf0c1b-3658-4271-8fc5-7011b701fca1", "comment": "Malware payload (CredentialFlusher)", "value": "50755cce5dbfac737cf0be6da248ecd8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479907, "uuid": "9f87d0b3-ad96-4f59-a8ad-5b6a2a778f4d", "comment": "Malware payload (CredentialFlusher)", "value": "ebb08357b9377669222a923af5586d49683eaad13b4de012b9a6e97e67dde350", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479907, "uuid": "2c9e6235-7bef-4b53-b1c2-30cbbe63beab", "value": "T1EF25AE027391C062FFAB92334B5AF6515BBC79260123E61F13981D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479907, "uuid": "85a7ab8f-fe75-41b8-bfe7-f243de1870b3", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479907, "uuid": "5e181ce4-2505-4bcc-a5a6-14eb3afd9a0d", "value": "24576:zqDEvCTbMWu7rQYlBQcBiT6rprG8aL2St:zTvC/MTQYxsWR7aL2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746479907, "uuid": "273cfd40-d649-4b03-9d50-2e8236552877", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479907, "uuid": "bd07f921-b993-4729-9984-9b1af6cd9804", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfc8309c-29f6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746480047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480047, "uuid": "1d2283d8-18fc-4547-a9be-4182f8a2031f", "comment": "Malware payload", "value": "141406dc9af56bd4f81d583bfaece0dd", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480047, "uuid": "833435c1-1940-4192-b967-93c51e1099f3", "comment": "Malware payload", "value": "f7577283135d9369c6c4ef4ec6bf514a173631c3f8bf421e40abf447725b9e09", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746480047, "uuid": "6eb690e6-a2b1-4277-8a46-3ef4405d1f60", "value": "T1E19512243F2B21DEF4D14D349B0EF6D6CB0D27BB0EE84A816AE61B1D60F2F8E49195", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746480047, "uuid": "0145502d-33de-498b-832f-18a73d2e4c97", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746480047, "uuid": "0926328f-65d6-4d87-8c94-27427d08570e", "value": "49152:+ictYcLwta/4t9a9UtymL5xoZC1pjbz5ismZg7RIfFqn:JcpwtZ3tySNfbz5tG4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746480047, "uuid": "d58211b2-6207-480e-86c7-e21e18924ca5", "value": 2058240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746480047, "uuid": "76c5ecc3-d86b-42a0-9f56-fcd6040f4a04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce27e05e-29f9-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746481333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481333, "uuid": "176b1a74-ba4b-4d33-bbc1-1b3314031bf2", "comment": "Malware payload", "value": "e95c22448089f4e7904772e1bc1f21db", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481333, "uuid": "16ea0279-ff86-4240-9812-8cd8554ff3ed", "comment": "Malware payload", "value": "769cd20d10a102697f01d512784e86e121ac60a7fe3364a2eb071b74e17a21a9", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746481333, "uuid": "b02c1b90-e011-47f0-be25-af7101445b83", "value": "T18333982568F5163715D285A03AA02F9BAF92EA2BD92F161573FC0FC65FD3E42CD032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746481333, "uuid": "704eb501-97b0-4b1d-841f-e847f17bb68a", "value": "768:LtrUz5AdZ+GZkckOk7khUCUaU0UFXX8YZ8/mUZs:JUdAdPZHjKC3pncVRU6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746481333, "uuid": "bff0b544-2d91-499f-94d1-824e004287bc", "value": 51684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746481333, "uuid": "0c6f7cc5-080a-4a80-b462-f42f7ff20fa0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86d2a211-29fd-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1746482931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482931, "uuid": "891aa2cc-4a0c-4eb3-ab54-ca53fc5b87cf", "comment": "Malware payload (Healer)", "value": "8b0d26662612fcc02d3fc6fbe9271a2d", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482931, "uuid": "98d04230-cc8f-4cae-9e23-6dcdd009424c", "comment": "Malware payload (Healer)", "value": "0fd928ba52c071864bb64826ed7a2eb62070ef8b29f33bea093f068b0a21c585", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746482931, "uuid": "b28f7c4b-2fa5-402c-947a-a5b8c5ca59ea", "value": "T1448533AC2934E63BCE595F74D5A6042877664DB8B9AD3C3F3638469C2B13C8C3A49F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746482931, "uuid": "8014013c-8db7-4044-9971-e5909f151a24", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746482931, "uuid": "c54426ff-2818-4ddf-ae26-2f4507c53180", "value": "24576:yX/nJUgMf2u3pjYp86rLJoTI8S2noObH8WzXGQ1Z+7BzslzltMgoQrIAsf1sU:yfe1pjlKD8SgRzuakpQ8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746482931, "uuid": "192d58d0-7d53-4327-a951-1ee8290817be", "value": 1742848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746482931, "uuid": "8cf2c442-b3ec-4ee9-bd15-70526f01267a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01af6588-29fe-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1746483137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483137, "uuid": "318282e3-db88-4b4b-afbd-54ef2c54137b", "comment": "Malware payload (Amadey)", "value": "b42c519572ff5dc5edb6e78fbd1c8f2f", "object_relation": "md5", "Tag": [ { "name": "8d33eb", "colour": "#7b3b0b", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483137, "uuid": "7b8754f7-1aa3-456d-ae67-82df7a367bce", "comment": "Malware payload (Amadey)", "value": "67a2e87017480099e35d4acc405a5aefc8c36643d22d642ad2a9fb0494913e7d", "object_relation": "sha256", "Tag": [ { "name": "8d33eb", "colour": "#7b3b0b", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483137, "uuid": "1ad508b5-d70a-45c6-a4a3-5b90ecba8bbd", "value": "T18C66333FAFEE5522F47F43B406F2029317717C61B97885937973ED0A00A1680EA797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483137, "uuid": "fb2f652c-677b-46be-9f78-d786593a9a66", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483137, "uuid": "e962c4bb-d8f1-4847-a021-15707303585d", "value": "98304:+KS1xfs/2onjpPgv20tnmBvHJxVo6+y+n4Huhf2WNoFnEqqnL/dwm0aoV2J9G:+/xfdolYvnmBvHJ6vNsjow4+2J4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746483137, "uuid": "505551f0-9794-46bf-b09d-7e1272d092fd", "value": 6487040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483137, "uuid": "53e8cebf-60fd-4f94-81dd-32a15e580f07", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9665f0b4-2a04-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1746485963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485963, "uuid": "81954684-49d1-4183-b4c3-5f7edabed1a8", "comment": "Malware payload", "value": "29f79e5a16206286a51aa2570cd469f5", "object_relation": "md5", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485963, "uuid": "5cf6a998-be68-4e52-82ea-fb8de99668bc", "comment": "Malware payload", "value": "e4c7ea5cacf061d0327fbcaa631c2d45481f8c7930bee4404a1da56d8b28fad2", "object_relation": "sha256", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1746485963, "uuid": "185793ed-d6ca-42d3-9958-985eb402713f", "value": "T15E16330A546B88DCF78D873C836686E583B560F4C653DABF69CDB0E42927C11E9839", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1746485963, "uuid": "5d413d3e-df3c-448c-a6bc-0b6046de62e3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1746485963, "uuid": "7a59fcf3-6ac4-4260-b785-9847e40f55f5", "value": "98304:8wVKP+OBY21tqeD+EIueniEiykF7OgC87kSuLQHvLAha:nVS5BWeQueniEzK7OgZQSu0Pc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1746485963, "uuid": "4ff5ea50-edcc-48f9-8e51-886001e538c4", "value": 4335104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1746485963, "uuid": "81d02d23-df29-4559-b34e-1689e4390c7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403205, "uuid": "e69ebaf4-2943-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.2.98:58299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403336, "uuid": "34735998-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.128.237:32908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403387, "uuid": "52ad86c3-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.83.169:56718/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403392, "uuid": "55ccccb0-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.231.161:35137/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403414, "uuid": "62cc1367-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.192.144:39931/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403414, "uuid": "63553fa6-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.158.171.71:52087/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403513, "uuid": "9e442413-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.15.175:53165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403573, "uuid": "c214e74b-2944-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.246:51429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403691, "uuid": "085a853e-2945-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.97.114:52815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403825, "uuid": "57d9c346-2945-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.239:55084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746403996, "uuid": "be372396-2945-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.65.96:40118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404069, "uuid": "e958a5f0-2945-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.33.127:52897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404111, "uuid": "029c2aad-2946-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.195.89:39985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404348, "uuid": "8fa721b6-2946-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.94.34:51312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404590, "uuid": "1feb184b-2947-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.239:55084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404711, "uuid": "68302bec-2947-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.165.247:49783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404773, "uuid": "8ce7d10f-2947-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.246:51429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404834, "uuid": "b15c839f-2947-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.112.101:46829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746404950, "uuid": "f6deaec4-2947-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.212.98:47555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405010, "uuid": "1a9b6643-2948-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.15.175:53165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405011, "uuid": "1b25066c-2948-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.48.199:48525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405190, "uuid": "85dda719-2948-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.63.183:37837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405311, "uuid": "cdc0cf9a-2948-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.51.163:53619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405313, "uuid": "cedef708-2948-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.217.43.218:47739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405431, "uuid": "154da20e-2949-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.118.182:36593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405455, "uuid": "23aa143c-2949-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.89.196:41819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405490, "uuid": "38585c1f-2949-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.195.89:39985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405689, "uuid": "aed161b8-2949-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.33.172:34478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746405971, "uuid": "575e8245-294a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.51:42919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406089, "uuid": "9d9e568e-294a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.94.34:51312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406510, "uuid": "9832bd80-294b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.212.98:47555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406510, "uuid": "987ce2f4-294b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.82.224:50248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406573, "uuid": "be1c2b2b-294b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.51.163:53619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406653, "uuid": "ed79c198-294b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.140.81.227:57255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406809, "uuid": "4ade7198-294c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.242.27:59378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406931, "uuid": "9368cbcc-294c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.89.196:41819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406931, "uuid": "93732b10-294c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.63.183:37837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746406991, "uuid": "b74569e6-294c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.130.58:50969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407110, "uuid": "fe0974ca-294c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.229.51:42919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407550, "uuid": "046e9dc1-294e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.82.224:50248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407652, "uuid": "4130b12c-294e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.20.87:52329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407713, "uuid": "657f2638-294e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.189.109:54008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746407775, "uuid": "8a818f65-294e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.242.27:59378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746408034, "uuid": "249210ba-294f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.20:57583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746408511, "uuid": "40fbaf1f-2950-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.17.153:43627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746409031, "uuid": "7727c508-2951-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.176.181:60078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746409044, "uuid": "7ea90042-2951-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.46:42375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746409450, "uuid": "70ec6ae5-2952-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.237.230:46819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746409508, "uuid": "939925e0-2952-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.20:57583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746409749, "uuid": "233332a7-2953-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.112.75:47265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746409809, "uuid": "47092e43-2953-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.189.109:54008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410175, "uuid": "20e39be1-2954-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.10:44177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410231, "uuid": "4256350f-2954-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.157.74:60535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410410, "uuid": "acdeff86-2954-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.176.181:60078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410487, "uuid": "daac5369-2954-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.161:39025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410536, "uuid": "f7f9c912-2954-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.237.230:46819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746410776, "uuid": "8706df79-2955-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.139.103.14:55105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411063, "uuid": "323c07bb-2956-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.195:50003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411253, "uuid": "a351d5bb-2956-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.75.115:35263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411671, "uuid": "9ccbffd2-2957-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.10:44177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411790, "uuid": "e34538d8-2957-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.228.18:35685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411806, "uuid": "ecda4070-2957-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.17:53022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411972, "uuid": "500258d4-2958-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.161:39025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746411973, "uuid": "50b6f412-2958-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.241:40851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412633, "uuid": "d9f82aaa-2959-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.139.103.14:55105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412687, "uuid": "fa6a110f-2959-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.97.166:49115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412750, "uuid": "1f989980-295a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.112:42649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412868, "uuid": "663f673d-295a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.11.194:47238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746412928, "uuid": "89f6db68-295a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.195:50003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413051, "uuid": "d30e4003-295a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.241:40851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413174, "uuid": "1c55b37d-295b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.75.115:35263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413410, "uuid": "a931fea8-295b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.17:53022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413593, "uuid": "16571c14-295c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.11.194:47238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413774, "uuid": "82563e70-295c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.234/bin.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413775, "uuid": "82b1ee8e-295c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.112:42649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746413948, "uuid": "ea16f01d-295c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.248.250:38352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414066, "uuid": "3061aab0-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.182.123.72:62516/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414067, "uuid": "30a5eea7-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.74/telnet.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414067, "uuid": "30a5fac8-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/nigger1.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414068, "uuid": "318d9fa0-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.217.66.191:24886/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31e17fa3-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.108.228:15729/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31e85806-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.203.12:12334/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31e91028-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.156:53973/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31ef01d8-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.114.63:14662/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31faa2ee-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.48.30.14:43157/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31ffc26d-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.87.174.193:26172/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "31ffca7f-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.129.204:39718/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "3200c386-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.9.240.135:23055/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "32025a64-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.114.49:31424/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "32060c90-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.146.246.169:43987/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "320800c4-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.36.229:48655/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "320a219b-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.241.205.209:42916/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "320a3a2c-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.19.140:11899/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "320bc341-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.215.125:30902/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "321f5903-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.8.120:11639/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "322415a7-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.47.76:31339/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414069, "uuid": "3234464d-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.21.115:2037/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "323da8bb-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.71.36:37460/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32436e8c-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.106.197:17750/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32446360-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.115.55:35627/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32652c99-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.172.154:14223/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "326b035a-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.169.173:42034/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "326b4a5e-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.183.60.198:22414/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "3271d323-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.103.139:58167/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32738b06-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.71.79:26062/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32799c89-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.101.121:50913/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "328ae2af-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.190.55.82:19753/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32994652-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.24.214:55327/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32994e96-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.5.44.161:24507/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32a9d2f3-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.43.54.204:48333/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414070, "uuid": "32afc751-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.242.155.216:36962/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "3311b029-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.167.156:15689/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "331837b0-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.5.215.195:40729/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "33406f38-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.36.94:41041/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "33594720-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.87.202.108:61106/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414071, "uuid": "3362b4b1-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/nigger2.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414072, "uuid": "337805c7-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.60.126.221:1519/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414072, "uuid": "33bda171-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.76.249:20692/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414072, "uuid": "33daa27f-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.52.222:22490/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414072, "uuid": "33ee4903-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.73.90:3397/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414073, "uuid": "3422ec9f-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.11.113:19890/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414075, "uuid": "35abd179-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.18.9.59:46673/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414077, "uuid": "367dcc59-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.116.51.82:32184/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414078, "uuid": "370900af-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.32.233:54830/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414084, "uuid": "3aac82b8-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.22.201:37804/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414089, "uuid": "3e0b01ae-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.34.7.153:56858/.i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414126, "uuid": "53b26294-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/nigger.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414142, "uuid": "5d59b866-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.155:56793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414269, "uuid": "a924cbc3-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.92:58996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414371, "uuid": "e6289259-295d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.112.109.159:51986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414430, "uuid": "0967bdee-295e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.215.80:35332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414431, "uuid": "09a75739-295e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.71.158:56432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414799, "uuid": "e4d720fa-295e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.85.94:49460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414850, "uuid": "037cb71d-295f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.215:56021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746414905, "uuid": "2455eafe-295f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.17:38047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415145, "uuid": "b362def5-295f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.170.5:33156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415205, "uuid": "d73e9166-295f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.97.166:49115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415505, "uuid": "8a1c903f-2960-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.215.80:35332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415566, "uuid": "ae4b5f53-2960-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.99.66:58007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415746, "uuid": "19564e68-2961-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.155:56793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415926, "uuid": "848c4f04-2961-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.208.167:34675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415926, "uuid": "850d7929-2961-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.90:36580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746415991, "uuid": "ab443297-2961-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.112.109.159:51986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746416319, "uuid": "6ef32806-2962-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.240.114:46256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746416413, "uuid": "a7439bb6-2962-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.170.5:33156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746416414, "uuid": "a7df1948-2962-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.99.66:58007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746416531, "uuid": "ed787120-2962-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.248.250:38352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746416740, "uuid": "6a3affa2-2963-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.114.225:49855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746416893, "uuid": "c4edb93f-2963-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.218.46:34715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417011, "uuid": "0b842f84-2964-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.26.140.77:50883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417091, "uuid": "3b29571e-2964-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.240.114:46256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417127, "uuid": "507eb285-2964-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.208.167:34675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417308, "uuid": "bcd14e5e-2964-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.210:53644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417309, "uuid": "bd04c0f7-2964-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.90:36580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417491, "uuid": "297a4b33-2965-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.114.225:49855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746417913, "uuid": "2541c372-2966-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.105.201:34594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418091, "uuid": "8f01df2b-2966-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.224.96:41210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418210, "uuid": "d670f423-2966-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.218.46:34715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418638, "uuid": "d541568a-2967-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.234.195.35:54374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418710, "uuid": "003be233-2968-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.150.154:53300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746418813, "uuid": "3d80bc1f-2968-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.191.105:48686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419110, "uuid": "ee78b11f-2968-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.210:53644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419174, "uuid": "14900f51-2969-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.192:46324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419411, "uuid": "a2067028-2969-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.189.146:43915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419472, "uuid": "c67b5bd2-2969-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.224.96:41210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419653, "uuid": "32038058-296a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.170.191:14220/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746419952, "uuid": "e4a0d013-296a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.24.66:40893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420012, "uuid": "084392cf-296b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.234.195.35:54374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420250, "uuid": "95dd5ff0-296b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.26.140.77:50883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420312, "uuid": "bb31d6ab-296b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.60:47325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420433, "uuid": "0301dcdd-296c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.123.116:34543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420491, "uuid": "25d774f0-296c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.192:46324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420678, "uuid": "95299ab4-296c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.169.71:41877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420733, "uuid": "b64942b3-296c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.174.140:45912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420748, "uuid": "bf14dde9-296c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.247:41821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420851, "uuid": "fc915299-296c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.11.94:50164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746420974, "uuid": "45924176-296d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.91:60525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421089, "uuid": "8a136f2d-296d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.12:38853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421212, "uuid": "d372c006-296d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.107:48712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421268, "uuid": "f4f3f4f5-296d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.243.91.17:60134/linux", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421271, "uuid": "f68dd54e-296d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.124:39896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421274, "uuid": "f8894165-296d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.239.205.200:60112/linux", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421334, "uuid": "1c38ba9f-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.168.11:36272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421510, "uuid": "84fb9bbb-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.132.197:48949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421510, "uuid": "85423b5b-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.150.154:53300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421573, "uuid": "aaacf9a7-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.219.194.130:40583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421632, "uuid": "cdf52726-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.60:47325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421636, "uuid": "d02a95e0-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.223.153:47875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421690, "uuid": "f0706956-296e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.72:40810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421751, "uuid": "14d9fb9a-296f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.74.98:53667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421752, "uuid": "1535d6d9-296f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.93.58:48426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421752, "uuid": "1594b249-296f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.232:58638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746421992, "uuid": "a4574afa-296f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.11.94:50164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422173, "uuid": "1018836e-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.9:59342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422262, "uuid": "4585498a-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.138.142:38015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422404, "uuid": "99eba6a3-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wubys.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422493, "uuid": "cf30753b-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.75:60455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422531, "uuid": "e5aeb1ce-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.174.140:45912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422532, "uuid": "e62e721a-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.12:38853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422532, "uuid": "e6406c71-2970-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.68:55869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422591, "uuid": "09a13201-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.213.53/bins/x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422600, "uuid": "0e86ee10-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.122.173:33314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422771, "uuid": "7470211e-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.219.67:46826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422771, "uuid": "7481865c-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.107:48712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422772, "uuid": "75419be8-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.168.11:36272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422790, "uuid": "8006d8fc-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.203:45025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422891, "uuid": "bc8d387b-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.219.194.130:40583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746422951, "uuid": "dfdaa8c4-2971-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.100:32837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423067, "uuid": "25125379-2972-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.24.132.197:48949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423130, "uuid": "4addd5ac-2972-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.223.153:47875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423309, "uuid": "b535fcd2-2972-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://205.250.196.100:37934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423365, "uuid": "d6a0e7c2-2972-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.72:40810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423366, "uuid": "d766e595-2972-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.121:51039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423545, "uuid": "41fb9bf5-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.93.58:48426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423545, "uuid": "4215f26f-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.13.41:47623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423561, "uuid": "4b52cefe-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.225:51865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423606, "uuid": "663ff3ba-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.18:43613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423666, "uuid": "8a2a69f6-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.72.243:52069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423724, "uuid": "acf566d5-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.232:58638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423785, "uuid": "d127f8ef-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.169.71:41877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423786, "uuid": "d18db946-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.2.69:51302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423788, "uuid": "d310f10d-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.191.9:36208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423845, "uuid": "f4bfe3cf-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.95.176:53308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423845, "uuid": "f4d03d38-2973-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.252:37015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423868, "uuid": "025a2052-2974-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.20.101:51938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423904, "uuid": "18563ce8-2974-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.219.67:46826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746423968, "uuid": "3e333312-2974-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.142.189:33224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424085, "uuid": "8423fbf2-2974-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.13.41:47623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424092, "uuid": "886561d1-2974-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.203:45025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424204, "uuid": "cac708e5-2974-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://hodef.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424445, "uuid": "5aa3bd9c-2975-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.24.237.205:52570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424445, "uuid": "5abde08c-2975-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.26.14:57415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424635, "uuid": "cbba426d-2975-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.128:59812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424636, "uuid": "cc2c267e-2975-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.63:54342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424643, "uuid": "d0ce7f59-2975-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.18:43613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424870, "uuid": "57e40460-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.20.101:51938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424870, "uuid": "57edeb56-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.100:32837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424984, "uuid": "9ba47855-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.213:57236/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424985, "uuid": "9c2abb1b-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.79.160.210:53402/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9cd3caea-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.181/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d0050a1-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.184/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d016173-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.182/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d10a6a1-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.109.173:49420/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d17cb8a-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.22.122.98:53951/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d1fecd5-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.26.90.42/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d1ff36c-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.216/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d1ff390-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.26.90.6/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d29b8b4-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.247/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424986, "uuid": "9d384dc5-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.26.90.7/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "9d5198f0-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.26.90.5/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "9d57a804-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.248/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424987, "uuid": "9d60613b-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.250/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424990, "uuid": "9f602441-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.26.90.43/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424991, "uuid": "9fd0e68c-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.177/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424994, "uuid": "a1d1440c-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.252/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746424998, "uuid": "a46b0737-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.122.61.160:45463/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425006, "uuid": "a90df15c-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.171.20:58306/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425013, "uuid": "acedf165-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.23:41413/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425013, "uuid": "ad163a6d-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.153.68:45329/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425013, "uuid": "ad163b30-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.107.209:51335/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425014, "uuid": "ad71380e-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.218.192:47834/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425047, "uuid": "c156c2b5-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.79.8.225:38701/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425051, "uuid": "c37da8d9-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.211:36247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425068, "uuid": "cdea1e9d-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.249.129:38262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425073, "uuid": "d0d047c8-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.1.27:49806/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425075, "uuid": "d22cdfc8-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.37.220.250:37313/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425109, "uuid": "e65589d2-2976-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.225:51865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425350, "uuid": "75b33924-2977-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.18:59895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425463, "uuid": "b98fbbb4-2977-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://qyzoz.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425536, "uuid": "e4990ff7-2977-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.128:59812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425536, "uuid": "e4e7ea89-2977-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.51.169:58733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425597, "uuid": "096bb68f-2978-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.68.48:35263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425775, "uuid": "73314c7e-2978-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.24.237.205:52570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746425891, "uuid": "b84a71c1-2978-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.26.14:57415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426189, "uuid": "6a363414-2979-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.44:40338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426190, "uuid": "6a54b447-2979-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.96.110.166:59454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426264, "uuid": "96f776ca-2979-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.129.49:52645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426372, "uuid": "d7152177-2979-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.18:59895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426433, "uuid": "fb454819-2979-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.189:38077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426552, "uuid": "42336b93-297a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.249.129:38262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426612, "uuid": "66505a7b-297a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.94.190.114:34742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426791, "uuid": "d0c5dd20-297a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.208.73:58895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426852, "uuid": "f538fdb3-297a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.249.62:44179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426912, "uuid": "18e8d05e-297b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.119.177:52463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746426919, "uuid": "1ce2cfa2-297b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.9.73.250:39453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427031, "uuid": "60210684-297b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.94.190.114:34742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427270, "uuid": "ee9bb15a-297b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.68.48:35263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427388, "uuid": "34d9f303-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.189:38077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427512, "uuid": "7e6cf4c0-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.230:48355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427573, "uuid": "a2ed5a06-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.5.23:58031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427631, "uuid": "c5b55bb7-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.133.32:37359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e874fd9a-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e8754b31-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e87952d5-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e8820c72-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticarc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e8854009-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/statici686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e887ea34-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e8895e45-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e88a605d-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e88bb3e6-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e88e0565-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e88e81b8-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e8901218-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427690, "uuid": "e89213ef-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.53.253.130/bins/staticmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427692, "uuid": "e9c20b69-297c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.96.110.166:59454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427825, "uuid": "390fb1e2-297d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.207.12:46801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427877, "uuid": "58421ae2-297d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.6:55993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427995, "uuid": "9e4ab0a3-297d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.201.171:47759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746427995, "uuid": "9e4fae64-297d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.72.202:50257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428048, "uuid": "be21a551-297d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.249.62:44179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428230, "uuid": "2a455adb-297e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.119.177:52463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428290, "uuid": "4e89f493-297e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.219.38:38585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428305, "uuid": "578aaa7e-297e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.120.184:56998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428352, "uuid": "735af8b1-297e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.103.102.44:46590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428472, "uuid": "baf7a538-297e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.25.63:13913/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428476, "uuid": "bd5795be-297e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.9.73.250:39453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428590, "uuid": "015a6691-297f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.36.9.81:37655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428591, "uuid": "01b6e742-297f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.228.23:36432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428710, "uuid": "48b2908f-297f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.234.201:45413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428833, "uuid": "91c64574-297f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.112.183:41990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746428888, "uuid": "b3020829-297f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.5.23:58031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429011, "uuid": "fbd7a55d-297f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.214.81:50529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429073, "uuid": "20bc3a89-2980-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.207.12:46801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429094, "uuid": "2d832e77-2980-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.53.146:60854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429375, "uuid": "d5303695-2980-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.201.171:47759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429436, "uuid": "f92eb1cf-2980-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.120.184:56998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429493, "uuid": "1b367dcc-2981-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.108.71:34887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429552, "uuid": "3eab71ba-2981-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.252:37015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429673, "uuid": "86d829f0-2981-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.112.183:41990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429674, "uuid": "874e1e5a-2981-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.51.169:58733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429852, "uuid": "f164dcde-2981-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.214.81:50529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746429910, "uuid": "13e6e249-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.72.202:50257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430025, "uuid": "587452c3-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.18.219/files/6336929412/Q1yLGzl.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430026, "uuid": "58f76a1d-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430026, "uuid": "5903f55a-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430027, "uuid": "595e82c6-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.18.219/files/5494432675/z4tJzfQ.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430030, "uuid": "5b3b32fb-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.18.219/files/6492235410/iEYYFtV.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430031, "uuid": "5bc1e0f4-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.64.18.219/files/740061926/2NWfbLK.exe", "Tag": [ { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430031, "uuid": "5c115fa8-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430053, "uuid": "69185d06-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/newtpp.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430053, "uuid": "691adc88-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/krongo", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430053, "uuid": "691bb54b-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430053, "uuid": "691bd86e-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/x.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430090, "uuid": "7ef95f2b-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.208.73:58895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430113, "uuid": "8d18e780-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.156.72.39/3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430150, "uuid": "a2eb5548-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.108.71:34887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430211, "uuid": "c7737a91-2982-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.36.9.81:37655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430452, "uuid": "56b4a885-2983-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.53.146:60854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746430878, "uuid": "550ab33b-2984-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.109.15:42297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431234, "uuid": "2900d761-2985-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.101:41796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431524, "uuid": "d5b3c18e-2985-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.caryurinating.click/utdoi.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431524, "uuid": "d5c2fb41-2985-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.caryurinating.click/zbah6.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431526, "uuid": "d6d61f29-2985-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.caryurinating.click/ijrun.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431526, "uuid": "d7163cca-2985-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.caryurinating.click/z2d63.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746431531, "uuid": "da588f3e-2985-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.caryurinating.click/766ft.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "min-headers", "colour": "#FF33AC", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746432012, "uuid": "f89f2993-2986-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.189.129:40679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746432132, "uuid": "403671b8-2987-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.109.15:42297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746432313, "uuid": "ac229372-2987-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.107:45669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746432615, "uuid": "605104c4-2988-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.83.53.99:4322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746432797, "uuid": "cc864ff7-2988-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.97.167:59520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433150, "uuid": "9f54f16f-2989-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.27.54:47239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433213, "uuid": "c461d6db-2989-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.213.205.41:49693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433689, "uuid": "e03c3b0c-298a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.228.23:36432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433754, "uuid": "071ab933-298b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeib7mr5lvi5wqxhix76dero33vgnnxpttsudyrqbj53pllhdbskqwq.ipfs.w3s.link/PASSWORDRECOVERY64EXE.EXE", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433930, "uuid": "6fe895a2-298b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/OR7undQA/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433992, "uuid": "9509cfdb-298b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/4SI5j07p/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746433992, "uuid": "9510dd56-298b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia601205.us.archive.org/26/items/new_image_20250430/new_image.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746434305, "uuid": "4fa0edd0-298c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.123.80:45305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746434350, "uuid": "6a2eb66b-298c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.97.167:59520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746434412, "uuid": "8f181b61-298c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.132.201:59941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746434772, "uuid": "6624bcd5-298d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.189.129:40679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746434773, "uuid": "668e5981-298d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.213.205.41:49693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435133, "uuid": "3d12bc0d-298e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.10.250:55391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435133, "uuid": "3d45676b-298e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.116:49049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435302, "uuid": "a20108fa-298e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://1sava.ru/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435670, "uuid": "7cfd9d2c-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.107:45669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435732, "uuid": "a2611dea-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.132.201:59941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435792, "uuid": "c5dd6ac8-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.113.195:39039/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435813, "uuid": "d2a3d75f-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.2.184:49828/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435814, "uuid": "d2ce4e34-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.166.144:48315/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435814, "uuid": "d2d2cf1e-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.116.173:59414/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435814, "uuid": "d31014d5-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.83.48.42:35111/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746435817, "uuid": "d47c2780-298f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.37.220.246:58767/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746436109, "uuid": "828c166a-2990-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.23.29:37755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746436212, "uuid": "c04dc536-2990-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.147.70:46772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746436265, "uuid": "e00b3fac-2990-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.27.54:47239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746436330, "uuid": "068f4cc1-2991-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.94.34:43934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746436866, "uuid": "46008217-2992-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://dysoh.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746436989, "uuid": "8f5a8454-2992-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.255.104.178:35249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437057, "uuid": "b7c5a241-2992-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.116:49049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437232, "uuid": "206f7098-2993-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.23.29:37755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437232, "uuid": "2070bb01-2993-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.95.176:53308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437238, "uuid": "238ee331-2993-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.23.38:42753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437291, "uuid": "433ddec4-2993-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.235.72:52411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437536, "uuid": "d51da69f-2993-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.252.120:57931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437711, "uuid": "3deb47f0-2994-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.17:59030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746437832, "uuid": "85d0770d-2994-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.107:46717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438073, "uuid": "1527743e-2995-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.248.73.246:33302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438131, "uuid": "38429e81-2995-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.94.34:43934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438199, "uuid": "60d3828b-2995-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.217.186:37151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438310, "uuid": "a273d8e2-2995-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.255.104.178:35249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438310, "uuid": "a2b6d5b5-2995-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.43.194:35826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438910, "uuid": "08345f49-2997-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.203.1.206:34138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746438910, "uuid": "0884a481-2997-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.111.202:60992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439324, "uuid": "ff298321-2997-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://gujem.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439333, "uuid": "043d3fd4-2998-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.107:46717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439515, "uuid": "70ca7fa0-2998-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.41.159:47561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439574, "uuid": "9463c25b-2998-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.39.196:55996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439632, "uuid": "b6f407aa-2998-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.72.173:49636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439751, "uuid": "fd9a94d9-2998-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.216:57809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439810, "uuid": "20c535c5-2999-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.43.194:35826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439811, "uuid": "213f4aa2-2999-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.176.229.47:49526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439873, "uuid": "4697b386-2999-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.16.195.95:53876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746439874, "uuid": "46bb281c-2999-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.129.94:35223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746440055, "uuid": "b2d28ce8-2999-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.86.61:43496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746440055, "uuid": "b2f57218-2999-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.248.73.246:33302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746440533, "uuid": "cf80897e-299a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.203.1.206:34138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746440776, "uuid": "6076dd39-299b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.69.41.159:47561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746441072, "uuid": "10e3c2f9-299c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.39.196:55996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746441196, "uuid": "5ad02f86-299c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.86.61:43496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746441308, "uuid": "9dbebb42-299c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.141.90:34311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746441432, "uuid": "e7c4576b-299c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.216:57809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442033, "uuid": "4e141b0a-299e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.144.20:40450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442207, "uuid": "b56fa38e-299e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.102.132:21508/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442383, "uuid": "1e8f1555-299f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bobuq.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442632, "uuid": "b3076c59-299f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.152.209:56798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746442690, "uuid": "d5a68e05-299f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.113.146.234:41669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443049, "uuid": "ab6781c8-29a0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.16.195.95:53876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443291, "uuid": "3be52ce8-29a1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.254.167:55022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443292, "uuid": "3c5c9c9d-29a1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.25.102:48535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443294, "uuid": "3d5e8d24-29a1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.33.121:57429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443357, "uuid": "63155858-29a1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.144.20:40450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443536, "uuid": "cd7a19d8-29a1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.152.209:56798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746443715, "uuid": "3832b814-29a2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.141.90:34311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746444072, "uuid": "0d564d62-29a3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.54.63:44205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746444132, "uuid": "30f58938-29a3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.25.102:48535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746444183, "uuid": "4f620b06-29a3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://kyfuf.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445037, "uuid": "4c4f57c0-29a5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.65.96:36865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445148, "uuid": "8e47b9ad-29a5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.2.69:51302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445390, "uuid": "1ebb42a6-29a6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.71.158:56432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445744, "uuid": "f1bd6caf-29a6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bipyv.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445812, "uuid": "1a3ef1d3-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.54.63:44205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445923, "uuid": "5c367ac0-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.117/hiddenbin/boatnet.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445952, "uuid": "6df6e125-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445952, "uuid": "6df79e34-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/skid.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445952, "uuid": "6df79ffd-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/bot.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445952, "uuid": "6df99e1a-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/skid.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445953, "uuid": "6e036650-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/bot.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445953, "uuid": "6e04ebb6-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/bot.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445953, "uuid": "6e06b528-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/skid.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445953, "uuid": "6e06b7ff-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.209.129.4/Mozi.a", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746445988, "uuid": "82df127c-29a7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://2024.sci-hub.se/4492/e569abd317d7e5f7a39d4af364fe6376/sorandaru2015.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446584, "uuid": "e6968252-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.175.236:45310/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446585, "uuid": "e6e4b45f-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.53.10:32845/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446589, "uuid": "e9a20ae7-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.113.237:50343/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446591, "uuid": "ea991d0f-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.65.96:36865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446593, "uuid": "eb7761b0-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.235.41:52277/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446598, "uuid": "ef038fd0-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.160.117:56188/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446613, "uuid": "f79ef3cb-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.209.13.141:42079/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446613, "uuid": "f7cb1f7d-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.195.255:33998/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446613, "uuid": "f7da4910-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.169.208:56755/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446614, "uuid": "f8121416-29a8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.152.111:42140/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446645, "uuid": "0ab349b9-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.194.160:56269/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446645, "uuid": "0ae88b4c-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.58.130:41319/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446662, "uuid": "14c219f3-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.102.224:35429/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446673, "uuid": "1b2f9c30-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.136.174:50472/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446673, "uuid": "1b4b9193-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.170.247:37811/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446673, "uuid": "1b4f37e8-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.98.59:33691/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446673, "uuid": "1b82e7b4-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.204.224:34729/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446771, "uuid": "55e9481e-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.10.37.35:52748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746446945, "uuid": "bd7bd92d-29a9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://hezob.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746447193, "uuid": "5145869d-29aa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.26.46:40583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746447313, "uuid": "98e2ccd9-29aa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.98:47851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746448204, "uuid": "ac3ec96a-29ac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.10.37.35:52748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746448449, "uuid": "3dd27708-29ad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.26.46:40583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746448803, "uuid": "11149497-29ae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wubod.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746449109, "uuid": "c79de553-29ae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:45023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746449414, "uuid": "7d37cffe-29af-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.226.191:52244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746449589, "uuid": "e562aa73-29af-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.180.173:39832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746449589, "uuid": "e56d1490-29af-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.135.80.41:48004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746449836, "uuid": "7871dc17-29b0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.4.2.45:58471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746449891, "uuid": "9989410d-29b0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.135:59439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450013, "uuid": "e2785355-29b0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.244.42:44582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450136, "uuid": "2b781d03-29b1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.29.5:33795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450250, "uuid": "6f3e479d-29b1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.226.191:52244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450314, "uuid": "955e3209-29b1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.93:60567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450373, "uuid": "b8f92ebc-29b1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.116.171:51206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450543, "uuid": "1e58e670-29b2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/igmnaycy59.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450693, "uuid": "778faf1d-29b2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.212:39817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746450914, "uuid": "fafbc753-29b2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.180.173:39832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451035, "uuid": "434c9d1d-29b3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.36:34484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451091, "uuid": "64ec82d3-29b3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.111.202:60992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451264, "uuid": "cbdeb5da-29b3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://lalaq.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451385, "uuid": "1436f6d8-29b4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.247.71:36285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451505, "uuid": "5b7b32d5-29b4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.244.42:44582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451508, "uuid": "5d5957ea-29b4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.77.6:49636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451565, "uuid": "7f31311b-29b4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.142:43181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746451624, "uuid": "a2b97bac-29b4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.135.80.41:48004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452109, "uuid": "c36bff30-29b5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.149:35915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452109, "uuid": "c36e8b5e-29b5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.36:34484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452109, "uuid": "c3a6074a-29b5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.111.247.213:58995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452289, "uuid": "2f1ed364-29b6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.212:39817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452406, "uuid": "74d5a2b0-29b6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.12.83.69/mlYOHPe255.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452412, "uuid": "77fd90cb-29b6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.23/HOST/CZXZDDS22.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452648, "uuid": "0516eadc-29b7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.247.71:36285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746452949, "uuid": "b82c258e-29b7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.135:59439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453123, "uuid": "2019c31b-29b8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wuxoq.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453433, "uuid": "d8cad834-29b8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.244.29:35462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453490, "uuid": "fa7faef4-29b8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.111.247.213:58995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746453614, "uuid": "44b0e12b-29b9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.171.97:52945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454145, "uuid": "80e8d2ff-29ba-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/cq9m8fp13o.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454326, "uuid": "ecd3c241-29ba-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://pekob.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454330, "uuid": "ef91fb6d-29ba-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.81:38642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454349, "uuid": "fae920b2-29ba-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.245.210:58077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454453, "uuid": "38dbd2ed-29bb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.244.29:35462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746454882, "uuid": "3819fb2c-29bc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.39.129.155:38267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455412, "uuid": "74012793-29bd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.131.67:57311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455472, "uuid": "97d22778-29bd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.88.101:55499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455650, "uuid": "01db67c9-29be-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.81:38642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746455950, "uuid": "b50ee287-29be-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.100.247.248:55638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746456011, "uuid": "d9776e27-29be-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.245.210:58077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746456184, "uuid": "404a658c-29bf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://jamaz.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746456674, "uuid": "64756841-29c0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.228.22:38797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746456734, "uuid": "88156374-29c0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.131.67:57311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746456834, "uuid": "c414d751-29c0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.39.129.155:38267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457385, "uuid": "0c8606d0-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.26.73:39935/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457385, "uuid": "0c940cf5-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.61.121.82:55689/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457386, "uuid": "0ceb42ac-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.207:35788/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457387, "uuid": "0db1c4b7-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.88.101:55499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457403, "uuid": "170703da-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.103:40237/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457444, "uuid": "2f7edfa6-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.241:40851/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457445, "uuid": "303bed2f-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.229:58166/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457446, "uuid": "3070dfc9-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.28.245:39016/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457446, "uuid": "30ecf238-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.220.37:47353/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457447, "uuid": "3145b2e0-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.128.99:40786/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457453, "uuid": "34996e35-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.11.210:33890/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457465, "uuid": "3bc80791-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.124.23:50249/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457465, "uuid": "3be6eb07-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.138:42987/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457472, "uuid": "401e8040-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.58.125:49003/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457472, "uuid": "4048fd35-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.113.143:33691/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457472, "uuid": "404e09ef-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.213.114:39940/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457472, "uuid": "404f08fc-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.105.160:35704/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457472, "uuid": "4051d53a-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.206.32:60089/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457473, "uuid": "40877a95-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.59:33701/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457486, "uuid": "48487e7d-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.223.196.158:37276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457491, "uuid": "4b629b2b-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.132.197:45506/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457572, "uuid": "7bf2eee8-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.104.243:53336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457690, "uuid": "c2453b20-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.228.22:38797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746457744, "uuid": "e257aa60-29c2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/1f63l7yfrh.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458056, "uuid": "9c0f3605-29c3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.202:50557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458297, "uuid": "2c1a953f-29c4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.163.207:56952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458406, "uuid": "6ca285b2-29c4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.116.167:18080/cb", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458406, "uuid": "6ca34fcc-29c4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.116.167:18080/cl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458406, "uuid": "6cc7092e-29c4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.116.167:18080/sl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458466, "uuid": "90506692-29c4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.116.167:18080/sb", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458475, "uuid": "961845e1-29c4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.139.200:37853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746458712, "uuid": "233fc7af-29c5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.21:45426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459843, "uuid": "c5860908-29c7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zesuz.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459912, "uuid": "ee9df51f-29c7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.204.26:40813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459972, "uuid": "124822ea-29c8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.xpsturs.com/android/app.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "pig butch", "colour": "#913b0c", "exportable": true, "hide_tag": false }, { "name": "pig butchering", "colour": "#f69f1f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746459975, "uuid": "14240eaa-29c8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.xsib.top/app/android/xsib.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "pig butch", "colour": "#913b0c", "exportable": true, "hide_tag": false }, { "name": "pig butchering", "colour": "#f69f1f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460207, "uuid": "9e3ab630-29c8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.243.21:45426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460806, "uuid": "03969ea0-29ca-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaviq.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746460823, "uuid": "0d76a623-29ca-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.206.65:35285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461110, "uuid": "b8c079ab-29ca-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.226.108.82:59978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461285, "uuid": "20bfa859-29cb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.204.26:40813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461343, "uuid": "43866f37-29cb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/cddhgqealq.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461363, "uuid": "4f8a10ca-29cb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.34.204:52697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746461588, "uuid": "d5ba5027-29cb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.9.61:54265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462364, "uuid": "a41d02ec-29cd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.141:59628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462562, "uuid": "1a0f9159-29ce-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.186.141:44359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746462742, "uuid": "857cb766-29ce-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.214.223:51456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463392, "uuid": "088a90ef-29d0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.26:36823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463574, "uuid": "75173982-29d0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.134.132.196:58930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463753, "uuid": "dfd3ae95-29d0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.105:47497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463872, "uuid": "26bf8111-29d1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nenyz.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463873, "uuid": "273c912b-29d1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.141:59628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463933, "uuid": "4b26412f-29d1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.169.99.163:48131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746463987, "uuid": "6b892414-29d1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.105:47497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464172, "uuid": "d964dcac-29d1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.93.161:51432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464172, "uuid": "d99dd0fc-29d1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.186.141:44359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464478, "uuid": "902652f4-29d2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.195.223:46636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464494, "uuid": "995a2278-29d2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.169.98:35014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464533, "uuid": "b0a34251-29d2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.134.132.196:58930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464695, "uuid": "11925017-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/wpa.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464706, "uuid": "180647c2-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/as.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464707, "uuid": "18b002eb-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/ktt.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464707, "uuid": "18b04287-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/oric.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464707, "uuid": "18cb3711-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/wpp.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464707, "uuid": "18cfd692-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/sm.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464707, "uuid": "18d18b68-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/audio.bat", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464709, "uuid": "199ddc3d-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/ukrn1.js", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464710, "uuid": "1a5ff90d-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/ukrn.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464710, "uuid": "1a654955-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/indo.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464710, "uuid": "1a686519-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/ori.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464712, "uuid": "1bb7093d-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/wordart.exe", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464713, "uuid": "1bf90adf-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.209.67.242/xp/sam.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464775, "uuid": "40d38b26-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.169.99.163:48131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746464945, "uuid": "a66fef90-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/dyklnq65wl.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465012, "uuid": "ce6515bf-29d3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.38:33577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465194, "uuid": "3aeb4682-29d4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.138.188:40914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465314, "uuid": "8257f449-29d4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.26:36823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465376, "uuid": "a72d109a-29d4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.101:41796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465436, "uuid": "cace1e93-29d4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.93.161:51432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465556, "uuid": "1252f4d4-29d5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://205.250.196.100:37934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465725, "uuid": "7750e4d0-29d5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://maxiv.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465731, "uuid": "7aa7de1a-29d5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.118:45691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746465733, "uuid": "7be2bebf-29d5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.154.15:55836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466035, "uuid": "2fd1a1fa-29d6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.195.223:46636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466217, "uuid": "9caed246-29d6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.38:33577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466451, "uuid": "284a5fbd-29d7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.48.224:48525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466749, "uuid": "d9ead77f-29d7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.179:42274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466825, "uuid": "06e9e878-29d8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.63.187:36088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746466933, "uuid": "4776b86c-29d8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.100.166:43949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467051, "uuid": "8dba0a64-29d8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.60.126:50124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467112, "uuid": "b1bcae1f-29d8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.129.94:35223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467289, "uuid": "1b70591d-29d9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.179:42274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467350, "uuid": "3fa71ecb-29d9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.118:45691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467351, "uuid": "40a5cab5-29d9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.71.11:40845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467472, "uuid": "88d71adc-29d9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.180.209:59709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467531, "uuid": "abad0a43-29d9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.177.125:34008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467724, "uuid": "1eeba2eb-29da-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.41.58:32887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746467832, "uuid": "5f0102d5-29da-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.180.209:59709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468066, "uuid": "eae3bd6d-29da-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.226.108.82:59978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468066, "uuid": "eaed60f5-29da-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.81.3:35477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468186, "uuid": "3254e2e1-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.222:42385/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468186, "uuid": "3254e434-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.11:33933/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468190, "uuid": "3462578b-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.162:56058/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468199, "uuid": "39b12e51-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.208.33:42257/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468213, "uuid": "4281800c-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.182.21:53369/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468213, "uuid": "428411c6-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.95:53391/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468213, "uuid": "42855ed4-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.127.159:49003/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468214, "uuid": "42a8fc6a-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.203.105:59673/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468214, "uuid": "42aa51b7-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.192.209:46064/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468214, "uuid": "42abf5ad-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.210.12:49689/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468214, "uuid": "42c421d8-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.106.125:47424/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468486, "uuid": "e4c47e41-29db-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.71.11:40845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468544, "uuid": "07ba061e-29dc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.177.125:34008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468604, "uuid": "2b6bed4d-29dc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.100.166:43949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468785, "uuid": "970d37ec-29dc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://naqod.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746468787, "uuid": "981f335e-29dc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.138.188:40914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746469026, "uuid": "26efa301-29dd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.41.58:32887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746469026, "uuid": "26f6afd0-29dd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.138:37723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746469084, "uuid": "49736da3-29dd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.155.172:43254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746470105, "uuid": "a9d356d4-29df-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.155.172:43254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746470173, "uuid": "d259b0f5-29df-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.133.89.148:47186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746470486, "uuid": "8cf48e53-29e0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.49:35435/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746470706, "uuid": "1009b53f-29e1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.170:36906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471305, "uuid": "7566aaca-29e2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.71:50167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471305, "uuid": "758be58f-29e2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.51.96:48973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471365, "uuid": "98db5fc4-29e2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.98.110:55056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471545, "uuid": "044ba930-29e3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.49:35435/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746471971, "uuid": "0222c189-29e4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.138:37723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472032, "uuid": "268a8fea-29e4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.61.121.82:55689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472144, "uuid": "690a6f5b-29e4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/o5ce5g2b7m.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472512, "uuid": "44e96ea7-29e5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.51.96:48973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472773, "uuid": "dffc8309-29e5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.60.126:50124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472871, "uuid": "1a647510-29e6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.71:50167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746472989, "uuid": "60fbaa52-29e6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.153.104:42564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473047, "uuid": "83aedc6e-29e6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://pusob.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473050, "uuid": "85459998-29e6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.230:46222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473793, "uuid": "40836c98-29e8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.225.24:34868/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746473891, "uuid": "7abf79cc-29e8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.23.176:34592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474248, "uuid": "4f7e0f62-29e9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.85.100:33376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474310, "uuid": "744342bc-29e9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.153.104:42564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474310, "uuid": "7466afda-29e9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.165.232:45856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474372, "uuid": "99902c35-29e9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.56.244.100:39030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474373, "uuid": "99e92a80-29e9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.9.40:47775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474438, "uuid": "c0ac0631-29e9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.230:46222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474611, "uuid": "27dc5e88-29ea-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.146:33772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474853, "uuid": "b7d9ede1-29ea-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.61.121.82:55689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746474912, "uuid": "db43b9b5-29ea-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.140:36131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475215, "uuid": "8fd19df9-29eb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.23.176:34592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475508, "uuid": "3e494364-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vekat.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475633, "uuid": "89180c3e-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.62.250.24:54234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475689, "uuid": "aa9539ce-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.165.232:45856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475690, "uuid": "ab1cb792-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.9.40:47775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475694, "uuid": "ad228aeb-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.7.153:38756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475745, "uuid": "cbb69d84-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/yhsbmwxqez.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475750, "uuid": "ceed1c38-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.140:36131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475751, "uuid": "cf565ae1-29ec-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.251.164:50487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475867, "uuid": "14319c8c-29ed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.237.29.59:34734/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746475885, "uuid": "1f3edd78-29ed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.254.167:55022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746476115, "uuid": "a86298e4-29ed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.56.244.100:39030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746476242, "uuid": "f3aeec2b-29ed-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.4.122:55742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746476463, "uuid": "77a4c6c5-29ee-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://lelah.press/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746476891, "uuid": "7698611b-29ef-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.86.147.188:35211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746477027, "uuid": "c7fb161f-29ef-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.25.198:54064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746477433, "uuid": "b9d79289-29f0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.103.152:49632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746477507, "uuid": "e601b7e3-29f0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.58.94:35740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746477909, "uuid": "d57dec47-29f1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.4.122:55742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746478208, "uuid": "87822b54-29f2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.251.164:50487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746478631, "uuid": "83eaaa12-29f3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.86.147.188:35211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746478811, "uuid": "ef3a31aa-29f3-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.39.180:50288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746478872, "uuid": "134b8a66-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.62.250.24:54234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479043, "uuid": "7985a64a-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.143.96:51603/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479044, "uuid": "7a1537fa-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.16.12:49731/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479044, "uuid": "7a242366-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.11.76:47386/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479044, "uuid": "7a407f88-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.21.126:60315/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479045, "uuid": "7a6d8304-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.87.149:35548/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479046, "uuid": "7b056b6c-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.99.48.170:50841/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479053, "uuid": "7fb70eb9-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.255.18.86:42779/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479063, "uuid": "857df57c-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.227.82.198:38515/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479072, "uuid": "8afed672-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.103.87:50770/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479073, "uuid": "8b0cd2b3-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.110.107:43507/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479073, "uuid": "8b15ad5c-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.48.66.214:45859/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479073, "uuid": "8b337317-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.167.204.193:55148/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479073, "uuid": "8b443eec-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.169.31:49320/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479111, "uuid": "a2496d9a-29f4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.216.160:46109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479343, "uuid": "2c43e712-29f5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/2w3hzyrwd5.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479411, "uuid": "5508b488-29f5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.170:36906/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479475, "uuid": "7ad06448-29f5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.72.13:50664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479834, "uuid": "50e900b9-29f6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.40.239:36508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746479889, "uuid": "716e72ab-29f6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://70.40.41.125:45887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480130, "uuid": "016d359f-29f7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.39.180:50288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480374, "uuid": "928ee09a-29f7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.163.170.129:49855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480490, "uuid": "d7c73e29-29f7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.216.160:46109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480550, "uuid": "fb967e67-29f7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.20.32:57930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480822, "uuid": "9dc409e5-29f8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://70.40.41.125:45887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480853, "uuid": "b06d45d1-29f8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.221.181:58824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746480973, "uuid": "f7c1f9ad-29f8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.125.152:57369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481088, "uuid": "3c867403-29f9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.75:40353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481331, "uuid": "cd5f97f3-29f9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.72.13:50664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481388, "uuid": "ef3878c6-29f9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.40.239:36508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481931, "uuid": "32f0ee39-29fb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.20.32:57930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746481991, "uuid": "5671c4f9-29fb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.234.133:44481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482052, "uuid": "7ac2fbe5-29fb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.15:50109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482172, "uuid": "c26cbfa7-29fb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.221.181:58824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482290, "uuid": "08aa43d0-29fc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.109.208:40616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482348, "uuid": "2ba2538e-29fc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.172:38183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482471, "uuid": "74dba266-29fc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.233/i686?ddos", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482533, "uuid": "99ae0e46-29fc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.75:40353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482648, "uuid": "de20c8e2-29fc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.247:45995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746482944, "uuid": "8e58a012-29fd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/8bhhtvsc6k.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483078, "uuid": "de9a3f70-29fd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.123.132:51842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483197, "uuid": "2524f86f-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.5.181:47260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483207, "uuid": "2b510bbb-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.41.204:49325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483439, "uuid": "b575cb7c-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.251.13:34560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483453, "uuid": "bde75122-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.7:56967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483490, "uuid": "d40f7600-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.109.208:40616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483491, "uuid": "d47eb874-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.190.203:49372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483552, "uuid": "f8f0757c-29fe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.135.173:40694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483612, "uuid": "1c95e9f3-29ff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.119.19.185:60237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483731, "uuid": "63e05484-29ff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.163.170.129:49855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483849, "uuid": "aa5674b1-29ff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.172:38183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746483865, "uuid": "b36c5267-29ff-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.208.35:58745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484040, "uuid": "1c29d5bb-2a00-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.116.108.59:43859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484274, "uuid": "a7716107-2a00-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.134.36:54598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484450, "uuid": "0fff8de6-2a01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.68.3:53268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484632, "uuid": "7d0f4041-2a01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.7:56967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484690, "uuid": "9f7959ec-2a01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.119.19.185:60237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484812, "uuid": "e834e1bb-2a01-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.94.186:39639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484931, "uuid": "2efecac6-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.40:55595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484931, "uuid": "2f3b200a-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.194.11:55234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484988, "uuid": "51201059-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.5.181:47260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746484989, "uuid": "5190f61b-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.208.35:58745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485109, "uuid": "990db9dc-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.106.136:39677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485172, "uuid": "bed03510-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.17:59030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485173, "uuid": "bf2103f1-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.251.13:34560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485193, "uuid": "cb26f69d-2a02-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.135.173:40694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485409, "uuid": "4ba32629-2a03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.235.143:41703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485603, "uuid": "bfc72326-2a03-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.134.36:54598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485828, "uuid": "45a74af1-2a04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.68.3:53268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485890, "uuid": "6ac352b8-2a04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.117.249:58753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746485950, "uuid": "8e8e04e3-2a04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.192.195.72:49895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746486013, "uuid": "b3f7c5b7-2a04-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.40:55595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746486313, "uuid": "66b4e86d-2a05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.94.186:39639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746486485, "uuid": "cd2dae97-2a05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.235.143:41703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746486543, "uuid": "efdda8c0-2a05-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.vad6.ru/79wdl5b4zq.1", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746486844, "uuid": "a2f78cac-2a06-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.106.136:39677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746487385, "uuid": "e57b3ca8-2a07-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.117.249:58753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746487393, "uuid": "ea8a30a4-2a07-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.238.80:37312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746487445, "uuid": "093d04f9-2a08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.10.250:55391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746487505, "uuid": "2d4fc12e-2a08-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.189.146:43915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488044, "uuid": "6ebf8c77-2a09-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.188.131:43457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488225, "uuid": "da687da2-2a09-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.111.247:58870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488424, "uuid": "50eacfeb-2a0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.200.61:49093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488465, "uuid": "6932aef6-2a0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:54949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488465, "uuid": "6960efb3-2a0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.104:43798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488647, "uuid": "d61b8603-2a0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.172:44992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746488704, "uuid": "f829235a-2a0a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.69.192:58810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746489016, "uuid": "b21bc2fe-2a0b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.18.45:52329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746489020, "uuid": "b3f685f5-2a0b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.111.247:58870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746489305, "uuid": "5e301a76-2a0c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.104.243:53336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746489425, "uuid": "a5c17024-2a0c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.28:51306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1746489485, "uuid": "c99053c7-2a0c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.70.35:46760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418083, "uuid": "8a79037b-2966-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.181.224.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746439503, "uuid": "69c737fe-2998-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.69.41.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2872f5-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.167.156", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e1d56c8-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.8.120", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415143, "uuid": "b1d7287c-295f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.170.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ec8dd6-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.11.76", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b31471-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.169.208", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446642, "uuid": "0928acda-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.170.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b344fa-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.175.236", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ed5d13-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.103.87", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2cc07f-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.105.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468183, "uuid": "3093a6c3-29db-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.106.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afdf85a-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.107.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ec94b1-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.110.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2d322f-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.113.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435783, "uuid": "c0b690ed-298f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.116.173", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446642, "uuid": "09289a7d-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.136.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435783, "uuid": "c0b67f9a-298f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.166.144", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468183, "uuid": "30937d83-29db-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.192.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b349cb-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.195.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468183, "uuid": "30932f85-29db-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.203.105", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2be4e2-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.206.32", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468183, "uuid": "30934e5f-29db-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.210.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2ceb63-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.213.114", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446642, "uuid": "09288910-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.98.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425043, "uuid": "beb6f56d-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.1.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422583, "uuid": "04bb0339-2971-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.130.213.53", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403383, "uuid": "50dfaccb-2944-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.158.171.71", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ed1edb-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.167.204.193", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435783, "uuid": "c0b67ae9-298f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.113.195", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b31dee-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.113.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468183, "uuid": "3093a0f0-29db-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403383, "uuid": "50dfb478-2944-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.231.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78edd928-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.48.66.214", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746428343, "uuid": "6dd0b279-297e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.103.102.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426183, "uuid": "66608b82-2979-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.96.110.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422224, "uuid": "2ec08374-2970-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.41.138.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437223, "uuid": "1ac76f9f-2993-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.23.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afe6e7d-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.177", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afe807a-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.181", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9aff442b-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.182", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afe7f54-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.184", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b039ce4-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.216", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afdd761-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.247", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b0205f1-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.248", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afe0d10-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.250", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414068, "uuid": "31a0cda5-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.18.9.59", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e211282-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.101.121", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e21743b-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.172.154", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405183, "uuid": "81925292-2948-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.63.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746484022, "uuid": "1161f1bb-2a00-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.116.108.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746485943, "uuid": "8a1a80be-2a04-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.192.195.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ece65b-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.227.82.198", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746488403, "uuid": "44887b2a-2a0a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.200.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411782, "uuid": "dee51499-2957-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.112.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435783, "uuid": "c0b66e9f-298f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.83.48.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746484803, "uuid": "e2d66b6c-2a01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.121.94.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474302, "uuid": "6fcbb256-29e9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.206.165.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746428463, "uuid": "b58822b7-297e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.25.63", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405423, "uuid": "104f3be6-2949-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.118.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420425, "uuid": "fe36119e-296b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.123.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467043, "uuid": "88f9d0d8-29d8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.60.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455404, "uuid": "6f521978-29bd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.25.131.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e207949-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.169.173", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446642, "uuid": "0928a9f2-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.58.130", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78edcc1c-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.169.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442623, "uuid": "ad762852-299f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.46.152.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403504, "uuid": "987511fe-2944-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.15.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746472983, "uuid": "5d88acc8-29e6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.153.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421205, "uuid": "cf18f114-296d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.100.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746431223, "uuid": "22841e7c-2985-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.194.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483183, "uuid": "1d03db4e-29fe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.5.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467342, "uuid": "3b54da7c-29d9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.71.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746484923, "uuid": "29ff9621-2a02-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.80.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746465722, "uuid": "75c69bf4-29d5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.154.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746407704, "uuid": "5fda3f9a-294e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.189.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474363, "uuid": "93c64b82-29e9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.9.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ee3c38-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.99.48.170", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746481983, "uuid": "5199fdce-29fb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.234.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423843, "uuid": "f394bd78-2973-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.20.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746406982, "uuid": "b1ef0ca8-294c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.130.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746484923, "uuid": "29ffa28f-2a02-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.194.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466803, "uuid": "f99571ee-29d7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.63.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746485883, "uuid": "6659774a-2a04-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.117.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414782, "uuid": "db27d7ec-295e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.85.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415563, "uuid": "ac2a8352-2960-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.99.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442023, "uuid": "48117ed8-299e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.144.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437523, "uuid": "cd7d08bd-2993-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.252.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422762, "uuid": "6faa9b31-2971-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.22.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746436082, "uuid": "73019d09-2990-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.23.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746470462, "uuid": "7eebebb1-29e0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746428283, "uuid": "4a0f8cb3-297e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.120.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746434283, "uuid": "42719529-298c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.123.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2c10f2-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.124.23", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408483, "uuid": "3037c090-2950-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.17.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2c7b5f-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.24.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403803, "uuid": "4b21a0d4-2945-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.31.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746404043, "uuid": "d9bc93f3-2945-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.33.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405662, "uuid": "9f352b37-2949-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.33.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461343, "uuid": "432deffb-29cb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.34.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483183, "uuid": "1d03e4f4-29fe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.41.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746408004, "uuid": "12c9d842-294f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483423, "uuid": "abf611cc-29fe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.9.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410463, "uuid": "cc667927-2954-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464463, "uuid": "871898cf-29d2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.169.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435121, "uuid": "361f76c8-298e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.175.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420304, "uuid": "b6022ecf-296b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.175.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746477004, "uuid": "ba19e652-29ef-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.25.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462542, "uuid": "0e307040-29ce-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.186.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746409022, "uuid": "71e0a53e-2951-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.241.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454323, "uuid": "eb3b99de-29ba-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.245.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425043, "uuid": "beb6edf0-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.249.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420722, "uuid": "af8f0d19-296c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.252.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446642, "uuid": "09287b99-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.102.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746429063, "uuid": "1b117a54-2980-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.53.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414124, "uuid": "52d1e92d-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.55.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414242, "uuid": "994ca58d-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.55.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457383, "uuid": "0aee8e96-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.56.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746477483, "uuid": "d7a3c28b-29f0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.58.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746489003, "uuid": "a9def272-2a0b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.18.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468183, "uuid": "30939b2e-29db-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.208.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483843, "uuid": "a62f889d-29ff-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.208.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746462723, "uuid": "79d7673c-29ce-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.214.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b387ce-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.160.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afea7c7-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.171.20", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467703, "uuid": "1253dd0f-29da-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.41.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471303, "uuid": "740a74a8-29e2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.51.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405423, "uuid": "104f434f-2949-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.89.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410162, "uuid": "19340d81-2954-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.157.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427503, "uuid": "7974e00d-297c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.24.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421743, "uuid": "100ea1af-296f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.24.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443282, "uuid": "365b8b38-29a1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.25.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746447183, "uuid": "4b41945e-29aa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.26.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450663, "uuid": "6596d835-29b2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468064, "uuid": "e94de923-29da-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.81.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746488462, "uuid": "67e0bd69-2a0a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453604, "uuid": "3e594125-29b9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.171.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746409022, "uuid": "71e0b0fe-2951-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.176.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473043, "uuid": "80f56ae9-29e6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.99.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746428823, "uuid": "8c1afe2c-297f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.112.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423662, "uuid": "8816fd3d-2973-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.72.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2ac5db-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.60.126.221", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438063, "uuid": "0f342acd-2995-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.248.73.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e35c221-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.251.21.115", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414362, "uuid": "e0d559f2-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.112.109.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746416282, "uuid": "5932e7ab-2962-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.240.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458283, "uuid": "236e730f-29c4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.163.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746409442, "uuid": "6c5428dc-2952-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.237.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450004, "uuid": "dc9d4b74-29b0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.244.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746439803, "uuid": "1ccdfcbb-2999-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.176.229.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746432303, "uuid": "a6353e93-2987-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.206.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420722, "uuid": "af8f0131-296c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.174.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464463, "uuid": "8718aee2-29d2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.195.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2303c4-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.5.44.161", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e369c7b-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.43.54.204", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746487382, "uuid": "e42ad6f3-2a07-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.238.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483423, "uuid": "abf5ffa4-29fe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.251.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427563, "uuid": "9cfeba6b-297c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.5.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746475622, "uuid": "82a20546-29ec-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.7.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451503, "uuid": "5a717d3e-29b4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.77.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746482043, "uuid": "755befee-29fb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.213.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419943, "uuid": "deea02a8-296a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.231.24.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746475622, "uuid": "82a2011d-29ec-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.62.250.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746449583, "uuid": "e1cb57de-29af-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.135.80.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463922, "uuid": "44e37e83-29d1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.169.99.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442203, "uuid": "b30d7323-299e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.102.132", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2ab489-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.103.139", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e1fc78e-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.24.214", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746444063, "uuid": "07837d67-29a3-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.54.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2998c4-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.71.79", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2bf3a8-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.247.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746470162, "uuid": "cc3404b4-29df-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.133.89.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461103, "uuid": "b45c8509-29ca-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.226.108.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427803, "uuid": "2c10f841-297d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.207.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411782, "uuid": "dee50820-2957-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.228.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483603, "uuid": "173b53a9-29ff-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.119.19.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746449403, "uuid": "76e36adb-29af-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.226.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457563, "uuid": "769427d7-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.104.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746478803, "uuid": "ea4bd91c-29f3-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.39.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415923, "uuid": "830024bf-2961-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.208.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746464643, "uuid": "f2652c0f-29d2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.209.67.242", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2c5229-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.11.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418623, "uuid": "cc66567d-2967-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.234.195.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746475863, "uuid": "11c66c78-29ed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.237.29.59", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e200112-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.242.155.216", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474363, "uuid": "93c64f2f-29e9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.56.244.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e1d7769-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.53.253.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435783, "uuid": "c0b6944c-298f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.37.220.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425043, "uuid": "beb6f1c0-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.37.220.250", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442683, "uuid": "d0ebf12e-299f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.113.146.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433203, "uuid": "beafe456-2989-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.213.205.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746480843, "uuid": "aa58460b-29f8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.221.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450303, "uuid": "8f127071-29b1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425043, "uuid": "beb7067a-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425583, "uuid": "00d18b79-2978-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.68.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746417903, "uuid": "1f6b0388-2966-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.105.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2055e6-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.47.76", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414422, "uuid": "0493bbee-295e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.71.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419643, "uuid": "2c4271d2-296a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.170.191", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443282, "uuid": "365ba8ed-29a1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.9.33.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ed16eb-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.16.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746452103, "uuid": "c0252f69-29b5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.111.247.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437703, "uuid": "391c86cf-2994-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.195.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433143, "uuid": "9ab0a784-2989-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.27.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419404, "uuid": "9da61a98-2969-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.189.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746469023, "uuid": "252d3435-29dd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.224.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473763, "uuid": "2e2d879f-29e8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.225.24", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479824, "uuid": "4ad096d0-29f6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.40.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2c3243-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.118.229", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746416883, "uuid": "bf06987f-2963-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.218.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453423, "uuid": "d291414f-29b8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.244.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474241, "uuid": "4b75f12f-29e9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.85.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430863, "uuid": "4bf1125c-2984-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.109.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411062, "uuid": "31c895a7-2956-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.177.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458463, "uuid": "8ee7f3c1-29c4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.129.139.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2091d9-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.22.201", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746430023, "uuid": "57309739-2982-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.156.72.39", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746417004, "uuid": "071a2d69-2964-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.26.140.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b0212f6-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.153.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746412863, "uuid": "62ded957-295a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.190.11.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405303, "uuid": "c931af8a-2948-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.217.43.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746458403, "uuid": "6b0b1c5e-29c4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.116.167", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435302, "uuid": "a1e9ef47-298e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1sava.ru" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423303, "uuid": "b1ee6403-2972-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "205.250.196.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445922, "uuid": "5be8e835-29a7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.209.129.4", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421563, "uuid": "a4bcf25a-296e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.219.194.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746467463, "uuid": "83145bb1-29d9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.180.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746449883, "uuid": "94d18b74-29b0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.193.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746419163, "uuid": "0e362001-2969-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.17.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b36065-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.68.235.41", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446642, "uuid": "0928771d-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.204.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746471303, "uuid": "740a79ec-29e2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.191.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420663, "uuid": "8c7e94ac-296c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.169.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746416704, "uuid": "545dd142-2963-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.114.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427982, "uuid": "96ddcfa2-297d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.201.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b057b79-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.218.192", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746466923, "uuid": "417b4dc4-29d8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.100.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e278ea6-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.190.55.82", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426603, "uuid": "60e76a09-297a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.94.190.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e24f4a2-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.71.36", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424443, "uuid": "593bf010-2975-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.26.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e210085-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.115.55", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414069, "uuid": "31ca62d4-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.73.90", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b002644-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.122.61.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746439863, "uuid": "4044435d-2999-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.16.195.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438903, "uuid": "0457aea4-2997-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.203.1.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423843, "uuid": "f394b0ae-2973-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.183.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746405303, "uuid": "c931b895-2948-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.51.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746488223, "uuid": "d8e99c25-2a09-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.111.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483062, "uuid": "d5436562-29fd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.123.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746480962, "uuid": "f16f99d2-29f8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.125.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746428583, "uuid": "fd20ed89-297e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.228.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e2008eb-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.9.240.135", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e7d6916-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.182.123.72", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746455943, "uuid": "b0dc5bc7-29be-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.100.247.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ed5267-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.255.18.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746406803, "uuid": "475af9e3-294c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.64.242.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746465182, "uuid": "33da5d5a-29d4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.138.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746409743, "uuid": "1f42a583-2953-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.112.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423782, "uuid": "cf7016df-2973-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.2.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424622, "uuid": "c4368155-2975-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.68.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446583, "uuid": "e5b37780-29a8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.152.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746484442, "uuid": "0bb7cc4e-2a01-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.68.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414069, "uuid": "322124dc-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.32.233", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746427982, "uuid": "96ddd1c9-297d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.72.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414842, "uuid": "fece6335-295e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.52.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746437282, "uuid": "3e41a39e-2993-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.235.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746475742, "uuid": "ca1e5eb0-29ec-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.251.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746443282, "uuid": "365b8785-29a1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.254.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423543, "uuid": "40ad74f2-2973-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.13.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746435121, "uuid": "361f671e-298e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.10.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479103, "uuid": "9d450b6c-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.216.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426242, "uuid": "89de3b1a-2979-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.129.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438304, "uuid": "9eda2a8f-2995-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.43.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421263, "uuid": "f1f8f220-296d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.239.205.200", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421263, "uuid": "f1f8a591-296d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.243.91.17", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e1f44a0-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.217.66.191", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e1f695f-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.106.197", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438183, "uuid": "56fab75b-2995-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.217.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746421623, "uuid": "c866f830-296e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.223.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746403383, "uuid": "50dfbcbf-2944-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.83.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422583, "uuid": "04baf02c-2971-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.122.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454742, "uuid": "e52c6037-29bb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.39.129.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450363, "uuid": "b2cd3462-29b1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.116.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2cf2f4-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.128.99", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746434403, "uuid": "8a0eef8d-298c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.132.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746483542, "uuid": "f34e1c0a-29fe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.135.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746418683, "uuid": "f03a19bb-2967-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.150.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746420842, "uuid": "f710b388-296c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.11.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746476223, "uuid": "e88b8e44-29ed-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.4.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746411243, "uuid": "9d5612d2-2956-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.75.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746461583, "uuid": "d2390466-29cb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.9.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746423782, "uuid": "cf701018-2973-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.191.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746456663, "uuid": "5dedebdd-29c0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.228.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445022, "uuid": "439b9ada-29a5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.65.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746432783, "uuid": "c45d7443-2988-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.97.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746438903, "uuid": "0457d5c3-2997-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.111.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457383, "uuid": "0aee9338-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afeb3cb-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746412743, "uuid": "1b8a6ac2-295a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746426903, "uuid": "1385433e-297b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.210.119.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746429483, "uuid": "151b7897-2981-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.108.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451383, "uuid": "12929341-29b4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.215.247.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746477423, "uuid": "b3f56d78-29f0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.103.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2bd4e3-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.220.37", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746474903, "uuid": "d5a0803c-29ea-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.228.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473883, "uuid": "75abe720-29e8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.23.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746457442, "uuid": "2e2c8aa3-29c2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.28.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afece8f-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.109.173", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746415923, "uuid": "83002833-2961-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.133.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746484264, "uuid": "a13cc2a3-2a00-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.134.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424622, "uuid": "c4366f67-2975-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479042, "uuid": "78ecd964-29f4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.143.96", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450124, "uuid": "246e8db3-29b1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.29.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746439563, "uuid": "8d9929a0-2998-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.39.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746489422, "uuid": "a40e5860-2a0c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.75.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746489483, "uuid": "c838c9ba-2a0c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.70.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746479462, "uuid": "73762cdc-29f5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.72.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afeff4d-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.252", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414063, "uuid": "2e226520-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.183.60.198", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746432604, "uuid": "597f822c-2988-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.83.53.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746410763, "uuid": "7f6d74ef-2955-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.139.103.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746414069, "uuid": "31fe32b5-295d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.116.51.82", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b055cb2-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.90.42", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b058d29-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.90.43", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9b0247a0-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.90.5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afde2c6-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.90.6", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424983, "uuid": "9afdb184-2976-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.90.7", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459965, "uuid": "0dd41e8d-29c8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.xpsturs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459962, "uuid": "0c8eb8b5-29c8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.xsib.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433743, "uuid": "00a85437-298b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeib7mr5lvi5wqxhix76dero33vgnnxpttsudyrqbj53pllhdbskqwq.ipfs.w3s.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746445743, "uuid": "f125b2bd-29a6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bipyv.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746442382, "uuid": "1e008372-299f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bobuq.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746436865, "uuid": "4577dc17-2992-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "dysoh.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746439324, "uuid": "fee09bb3-2997-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "gujem.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746446944, "uuid": "bd283a66-29a9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "hezob.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746424203, "uuid": "ca7ddea2-2974-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "hodef.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746433983, "uuid": "8fd58161-298b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia601205.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746456183, "uuid": "3ffd0ad8-29bf-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "jamaz.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746444183, "uuid": "4f136593-29a3-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "kyfuf.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746451263, "uuid": "cb8a591a-29b3-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "lalaq.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746476462, "uuid": "775acf64-29ee-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "lelah.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746465725, "uuid": "7705d029-29d5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "maxiv.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746468783, "uuid": "95ce1aa3-29dc-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "naqod.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746463863, "uuid": "2147da68-29d1-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "nenyz.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746454325, "uuid": "ec7c940a-29ba-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "pekob.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746473043, "uuid": "8102b094-29e6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "pusob.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746425463, "uuid": "b9470432-2977-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "qyzoz.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746450543, "uuid": "1e14e249-29b2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "u1.vad6.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746460803, "uuid": "01d40632-29ca-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaviq.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746475503, "uuid": "3b8474f8-29ec-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "vekat.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746448803, "uuid": "10cc122a-29ae-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "wubod.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746422403, "uuid": "99889a6a-2970-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "wubys.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746453123, "uuid": "1fc2f989-29b8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "wuxoq.press" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1746459843, "uuid": "c538ca15-29c7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "zesuz.press" } ] } }